Setting up your Shield device

Table of Contents

Product Overview

Supported Printers

Compatible software

Management software

List of Key Components

Shield Device Views

Shield Mounting

Shield Installation

Changing the printer IP address

Moving Shields between Printers

Shield Troubleshooting

Resetting Shield

ACDC Adapters and other Regulatory Information

Certifications

Product Overview

Shield is a dedicated industrial security appliance developed by Stratasys, that segregates Stratasys printers from the network, monitors network traffic and applies security measures in order to protect the printer, functioning as a dedicated network safeguard for connected assets. 

It is an innovative, stand-alone, palm-size network device providing highly secured connectivity for high-value physical assets (like Stratasys printers) that are deployed in industrial verticals such as manufacturing, smart facilities, agriculture and energy. The Shield protects the printer from attacks originating from the network and protects the network from attacks originating from a potentially compromised asset by isolating and defending both ends.

Deployment of the Shield does not require any modifications or configuration changes to the printer and does not impact customer operations or other security measures. It complements existing security measures, offering defence in depth.

Supported Printers

Shields supports Stratasys FDM and PolyJet 3D printers and can be connected to the following models.

Moving a Shield between printers is described in the section Moving Shields between Printers.

Compatible software

The following Stratasys software is compatible with Shield:

• GrabCAD Print desktop (both Standard and Pro)
• GrabCAD Print Server
• GrabCAD Control (via GrabCAD Print Server)
• Control Center
• GrabCAD Printer Connectivity API

Managing Shield

A Shield is managed through GrabCAD Print desktop when in possession of a valid GrabCAD Streamline Pro license.

Multiple Shields can be managed at the same time or from different GrabCAD Print desktop installations.

Any updates to a Shield will come bundled with a new GrabCAD Print desktop version, including firmware and shield software.

A Shield will never connect to the internet to fetch updates.

GrabCAD Print desktop will determine if a Shield is in need of an update and will push the update automatically to the Shield, no action from the side of the user is needed.

List of Key Components

1. Shield Device X 1

2. Velcro pads X 2 (1 pad already attached to the Shield)

3. Ethernet cable (to connect the Printer to Shield) X1

4. EU power adapter, 5V/2A with USB type C connector X 1

5. US power adapter, 5V/2A with USB type C connector X 1

6. Presaturated (wet) wipe for mounting preparation X 1

7. Dry wipe for mounting preparation X 1

Shield Device Views

Shield Mounting

Please complete all steps specified in the Shield Installation section before mounting the shield.

1. Select a specific mounting location on top or at the side of the printer as shown in the images below. If you are unable to locate it, please contact customer support.

2. 

   

   

   

3. Using the supplied presaturated (wet) wipe, clean the designated mounting area making sure to remove all dust and other residues.
4. Using the supplied dry wipe (labeled “STEP 2”), thoroughly dry the designated mounting area.
5. Peel off the protective transparent strip from supplied Velcro and adhere it to the designated mounting location.
6. Applying moderate pressure, affix the shield to its designated place until both Velcro pairs are adjoined together. Verify that the Velcro pads are securely attached (entire surface areas).

Shield Installation

Please complete all steps specified in “Shield Installation” section before mounting the shield

1. Select the 5V/2A shield power adapter suitable to your region (EU or US) and connect the supplied 5V/2A shield power adapter to a standard electrical outlet. If your country supports neither adapter, you should locally purchase a compatible 5V, 2A, USB-C adapter. The device can not be powered from USB ports on Stratasys printers which come with such ports.

2. Connect the Type C connector (other end of the power adapter) into the power port labelled 5V2A

3. Wait for the rear SYS LED to start blinking twice every second in red. The device is now powered on and booted up.

   Do NOT remove the power cable while the system is booting up.

4. Plug the supplied ethernet cable into the printer’s ethernet port. (If the printer already has an ethernet cable plugged in, you will need to unplug it before this step). At this point, the printer will temporarily lose connectivity in GrabCAD Apps.

5. Remove the blue protective dust cover from PRT port on the Shield device. Take the other end of the ethernet cable (already plugged into the printer’s ethernet port), and plug it into the shield PRT port.

6. Remove the black protective dust cover from the LAN port and connect your existing network cable (that was connected to the printer, unplugged in Step 4) to the Shield's LAN port.

7. The Shield device is now connected to your network, and your printer is now connected to the Shield device. Verify that all three plugs are secured in place. Loose or unsecured cables may cause connectivity issues.

8. Make sure the printer is turned on and verify that the Shield ethernet port lights are active.

   The LAN and PRT LED lights will not be active.

9. In 3 minutes, your printer should be discoverable / can be added in GrabCAD Print.

   The IP address to use is that of the printer, the Shield is transparent and will not have an IP address of its own.

   The Shield Installation is now complete.

10. Once a Shield is detected for a printer, GrabCAD Print will show a small Shield icon next to the printer.

    

    The printer's Settings will show the Shield configuration information and whether its Firewall is operational.

    The red dot on the Shield indicates the firewall has detected network traffic that is not necessary for normal printer operation and which is blocked from reaching (inbound) or leaving (outbound) the printer.

    

    
    

Changing the printer IP address

When using a dynamic IP address the printer will receive an IP address from a DHCP server. This IP is "leased" for a limited period of time and will expire. A typical value is 24 hours.

When the lease needs to be renewed the printer can get either receive the same IP address (your network administrator can arrange for this) or a different IP address.

When using a static IP address for a printer, there can be reasons this address needs to be changed.

Enter the new IP address into the software that's connected to the printer and Shield will continue to operate.

When the printer is configured to broadcast its IP address no action is needed.

Moving Shields between Printers

When a Shield coming from the factory or after a factory reset is first connected to a printer GrabCAD Print desktop will determine the printing technology for that printer (FDM or PolyJet) and pushes the configuration appropriate for that technology to the Shield.

From then on this Shield can be freely connected to other printers of that same technology.

If this Shield needs to be connected to a printer of a different technology, a configuration reset is needed first.

Shield Troubleshooting

When a Shield is connected to a printer following the instructions in the Shield Installation section, but does not appear in GrabCAD Print, the following actions are available.

• to allow GrabCAD Customer Support to assist in diagnosing the problem submit a message through the built-in feedback tool in GrabCAD Print desktop under "Help > Give Software Feedback". Ensure the option to include log files is checked. Describe your problem and click "Send".
• the Shield was previously connected to a printer with a different technology. See the section Moving Shields between printers for steps to remedy.
• the network cable into the Shield or from the Shield to the printer is faulty. Replace the cable(s) to remedy.
• assign a static IP address to your printer instead of a dynamic address through DHCP.
• as a last resort perform a factory reset.

If the problems persist please start a conversation with GrabCAD Customer Support to have your Shield replaced.

Resetting Shield

A Shield can be reset by pressing the "Reset Button" on the side of the Shield.

When the reset button is pressed, the PRT LED (middle LED on the front) will start blinking with a green light.

The following operations are available:

• configuration reset: after 5 seconds the PRT LED will stop blinking and have a continuous green light, and the LAN LED (left hand LED) will start blinking green - if the button is released at this point, the configuration will be reset. The Shield can now be connected to a printer of any supported technology.
• factory reset: after 10 seconds of pressing the reset button, both the PRT and LAN LEDs will be green continuously - if the button is released from this point on, the system will be reset to factory settings. Both the PRT and LAN LEDs will stay continuously green until the factory reset has concluded, and then turn off.

AC/DC Adapters and other Regulatory Information

Model: MKA-0502000H (USA) or MKA-0502000HEUD (EU)

Input: 100-240V~, 50/60Hz, 0.4A.

Made in China

Manufacturer: Shenzhen Merryking Electronics Co., Ltd.

8F, Building A, Tianyang 2n Road, Oriental Community, Songgang Street, Bao’an District, Shenzhen City, 518105 Guangdong, P.R. China

Product usage is subject to manufacturer guidelines documentation that can be found here.

Certifications

View the Shield's compliance and security certifications here.

Contact print@grabcad.com for any installation related issues or security@grabcad.com for any security related concerns or questions.