Establish Console Connection and Initial Setup

This topic explains how to connect a local serial console to your OT Security appliances (ICP and Sensors). Use this connection method for initial IP configuration, network troubleshooting, or restoring access when the management IP is unreachable.

Before you Begin

Make sure you have the following software and hardware:

Software

  • Terminal Emulator: A utility such as PuTTY, Tera Term, Serial, or Minicom.

  • Drivers: Ensure you install the drivers for your specific USB cable or adapter(for example, FTDI or PL2303).

Hardware and Cabling Options

Identify your appliance type to select the correct cabling method:

  • Tenable OT Security or Tenable ICP (Industrial Core Platform) Console

    • Port Type: RJ-45 Console.

    • Recommended Cable: USB-to-RJ45 console cable.

Note: A light blue Cisco-style console cable is typically included in the appliance box. This is a standard cable (approximately. $10) commonly used for network switches.

  • Tenable Sensors: Sensors have two hardware variations. Verify the physical ports on your device:

    • RJ-45 Console Port: Use a USB-to-RJ45 console cable.

    • DB9 (Serial) Port: Use a USB-to-DB9 serial cable.

Tip: Tenable recommends that you use direct USB-to-DB9 female connector cables (single piece) rather than multi-part adapters to minimize connectivity issues.

Alternative Method (Legacy Adapters)

If you use a standard serial-to-USB adapter instead of a direct USB-to-console cable , you must use a null modem adapter or coupler in the chain.

Tip: Many connection failures occur because standard serial adapters do not cross the transmit or receive pins correctly without a null modem.

Physical Connection

  1. Connect the USB end of your cable to your workstation.

  2. Connect the other end (RJ-45 or DB9) to the appliance.

    • Labeled Ports: Locate the port that has the Console label or with a monitor or IOIOI symbol.

    • Unlabeled Ports: If the ports do not have a label, connect to the single RJ-45 port located to the left of the USB ports.

  3. Ensure the cable is firmly seated.

Identify the COM Port (Windows)

You must identify the Communication Port (COM) that Windows assigned to your cable.

  1. On your Windows machine, right-click Start and select Device Manager.

    The Device Manager window appears.

  2. Expand Ports (COM & LPT).

  3. Locate your device (for example, USB Serial Port) and note the number (for example, COM3).

Configure Terminal (PuTTY)

Launch your terminal emulator (for example PuTTY) and configure the session with the following Tenable TTY settings.

In PuTTY, go to Connection > Serial and configure the following settings:

Setting Value
Connection Type Serial
Serial Line: Your COM port (for example, COM3)
Speed (Baud) 115200
Data bits 8
Stop bits 1
Parity None
Flow Control

None

Note: Ensure Flow Control is not set to XON/XOFF.
Tip: On the Sessions page, save these settings as "Tenable OT Console" for future use.

Establish Connection

  1. Click Open to start the session.

  2. When the terminal window appears, press Enter twice to wake the console.

  3. Verify that the following prompt appears:

    Copy 
    ##############################################################################

      This system is restricted to authorized users only. Individuals attempting
      unauthorized access will be prosecuted. Continued access indicates
      your acceptance of this notice.

    ##############################################################################

  4. Log in at the prompt.

Initial Network Configuration

The management interface requires a Static IP. DHCP is not supported.

  1. Run the network manager tool:

    Copy 
    sudo nmtui

  2. Select Edit a connection.

  3. Select the management Interface (typically the first interface, for example, nic0 or eth0).

    Caution: Do not configure the second interface (often nic1). This is the SPAN or mirror port for passive monitoring and does not require an IP address.

  4. Set IPv4 Configuration to <Manual>.

  5. Select <Show> and enter the following:

    • Addresses: Your Static IP or CIDR (for example, 192.168.1.50/24)

    • Gateway: Your gateway IP address.

    • DNS Servers: Your DNS IP addresses.

  1. Navigate to the bottom and select <OK> to save.

  2. Select Quit.

Access the User Interface

After you configure the IP, do the following:

  1. Connect a network cable from the Management port to your network switch.

  2. Open a browser and navigate to the IP address via port 8000: https://<YOUR_STATIC_IP>:8000

    OT Security login page appears. You can now proceed with the Setup wizard. See Configure OT Security Settings using Setup Wizard .

See also

Console Cables to Connect to OT Security Sensor