Basic security measures
Firewall: The operator of the application must be informed in the documentation
that, for VdS-compliant operation, a firewall must be used on the smart device
and the master where technically possible. The operator is also made aware that
the software of the firewall must be updated automatically and regularly via a
suitable process. If the master is reachable via a public network, the following
also applies: The operator of the application must be informed in the documen-
tation that, for VdS-compliant operation, an application firewall must be used on
the master where technically possible. The operator is also made aware that the
software of the application firewall must be updated automatically and regularly
via a suitable process.
Protection from malware: The operator of the application must be informed in
the documentation that, for VdS-compliant operation, a suitable program to pro-
tect against malware is required on the smart device, the master and any required
server. Regular checks for malware and automatic updating of the signature data
software must also be recommended. Furthermore, the operator must be infor-
med that, in the event of an infection by malware, he is responsible for ensuring
that the virus finding is documented by the protection program and remedied
using suitable measures.
User code: It must only be possible for the application to be started by authorised
persons. The authorisation must be verified by entering a user code or another
equally valid identification feature (e.g. fingerprint). The user code is not the same
as the locking code of the smart device.
The user code must have a minimum length of 8 characters and must contain
lowercase and uppercase letters and numbers. The user must be asked automati-
cally at regular intervals to change the user code.
Connection to control and display equipment of security systems: The addi-
tional requirements of the other sections of directive 3169-1 must be observed
where applicable.
Notes in accordance with VdS directives2156-2, 2386, 3169-1 and 3169-2
43
EN