This is an old revision of the document!


SSH access

All Unipi devices include a full-featured ARM-based Linux environment, which is accessible via a Secure Shell console after following the steps below. This allows the users of Unipi devices to fully leverage the incredible versatility provided by open-source software packages.

Axon
Neuron
Unipi 1.1

Patron / Axon controllers and Unipi Gate devices have an internal SSH server. This server is enabled by default for all the most current OS images that we provide for these units. The exception is the Mervis OS image, which has SSH disabled. Instructions for enabling SSH can be found in the leaflet supplied with the unit or below. After enabling the server, it is then possible to connect to the PLC through any SSH client in the local network. The following instructions are intended primarily for users who are not yet familiar with SSH.

Connecting to the service interface, enabling the SSH

The first step is to enable remote access to the SSH internal server. This configuration is available in the Axon service interface accessible by the following methods:

1) In a local network (with DHCP):

  1. Connect the unit to your local network, plug in the power supply and wait at least for a minute before the unit boots and gets an IP address from DHCP. After that unplug the power supply
  2. Press and hold the Service button located (with exceptions) in the upper row of the connector labels to the left from USB port labels
  3. Plug in the power supply. After few moments the unit will switch to the service mode indicated by the slow flashing of all diodes in section 1 (except PWR and RUN)
  4. Now you can release the Service button.
  5. You now need to get the unit's IP address. You can obtain it either from the DHCP server or using a suitable application such as Advanced IP Scanneruser manual

2) Direct connection to the unit (without DHCP):

  1. Connect to the unit using a network cable (RJ45)
  2. Press and hold the Service button located (with exceptions) in the upper row of the connector labels to the left from USB port labels
  3. Plug in the power supply. After few moments the unit will switch to the service mode indicated by the slow flashing of all diodes in section 1 (except PWR and RUN)
  4. Now you can release the Service button.
  5. Set the PC's IP address to 192.168.200.100, mask 255.255.255.0
  6. The Axon's IP is now set to 192.168.200.200

3) Via a Wi-Fi hotspot

  1. Press and hold the Service button located (with exceptions) in the upper row of the connector labels to the left from USB port labels
  2. Plug in the power supply. After few moments the unit will switch to the service mode indicated by the slow flashing of all diodes in section 1 (except PWR and RUN)
  3. Now you can release the Service button.
  4. Connect to Wi-Fi network with SSID: UNIPICONFIG, using unipi.technology as password. Wait until your unit obtains an IP address from the DHCP server running in the unit
  5. The Axon's IP is now set to 192.168.201.1

Enter the IP address into your browser's address tab and confirm. Upon loading the service interface the following screen with multiple buttons should appear:

To enable the SSH server first, click Enable ssh in the Settings category, and when the successful enable message appears, click Restart System in the upper right corner.

All up-to-date OS images provided for Unipi Neuron and Unipi 1.1 controllers have SSH enabled by default except for the Mervis OS image. To enable SSH in Mervis OS create a new empty file named ssh (without any suffix, or with *.txt* suffix) and place it into the microSD card's boot directory along with Mervis OS. The SSH server will start after re-inserting the SD card into the PLC

There are many tools that can be used to connect to SSH servers. For this tutorial, we recommend using PuTTY

Connect via SSH using PuTTY

For using SSH you need to know the target controller's IP address. To detect the address you can follow this guide: Detecting the unit's IP address.

To connect to the controller we will use the PuTTY. You can use other SSH applications as well, but PuTTY is the most suitable for Windows OS. The program can be downloaded in the Useful tools.

You must enable SSH before connecting to the controller.

Upon finishing the configuration you need to disable the SSH access or change the user password!

Install the downloaded PuTTY following the installer's instructions. After that, launch the program through putty.exe (its default location is C:/Program Files/PuTTY).

After launch, the following window will appear:

Enter the IP address into the Host Name tab and check if the Connection type is set to the controller's SSH. Then click on Open. A security dialogue window will appear for the first time. Click on “Yes” to display the SSH terminal's command line.

A prompt to enter login and password will be displayed
The default login and password is:

  • Login: unipi
  • Password: unipi.technology


Login has a time limit. If the limit expires, login will be no longer possible and you need to restart PuTTY and log in again.

The password is entered as an invisible text, eg. if the cursor does not move when entering the password, it is not an error!

After a successful login to a Unipi PLC this screen will appear:

Securing the OS (SSH)

Securing the operating system is always needed to prevent unauthorized access to the Unipi units. Using a non-secured OS may lead to unauthorized tampering that can stop or limit the system's operation. In the worst-case scenario, it may also cause damage to the connected technologies or endanger personnel on the installation site.

For these reasons, it is important to properly secure the system each time a new project is created. Alternatively, you can disable the SSH access completely.


As the connection is provided by the SSH protocol, it is necessary to know the IP address or the mDNS address of the device and have an SSH client installed on your PC or tablet. Among the most frequently used clients for Windows OS is the PuTTY application - user guide and default passwords are available here.

Before continuing, make sure you are logged in as the right user (for example “unipi” on our OpenSource OS). You can verify this by whoami command.

unipi@S103-sn999:~$ whoami
unipi

Now letps proceed to change the password by entering the following command:

passwd

A prompt to enter and confirm the current and new password will be displayed. If everything is set correctly, the following message will appear:

Changing password for unipi.
Current password:
New password:
Retype new password:

The entire process is depicted below (the password is not visible during its entering):

unipi@S103-sn999:~$ passwd
Changing password for unipi.
Current password:
New password:
Retype new password:
passwd: password updated successfully


Was the password change unsuccessful?
If the password change fails, the following message will appear:

passwd: Authentication token manipulation error
passwd: password unchanged

To solve this issue, try to enter the command below and then repeat the password change process.

sudo mount -rw -o remount /

Next, it's good practice to sync the changes on the storage (eMMC or SD card). This can be achieved by the sync command:

unipi@S103-sn999:~$ sync

You can now logout from your SSH session, reboot the PLC or power it of and on and login back to verify that the password has been sucesfully changed.

If the password cannot be changed even after entering the command, please contact our technical support.