YORK® Chiller Access Manager Q&A

Check out the below questions that have been asked about YORK Chiller Access Manager. Reference these to gather more information. If your question isn’t listed here, submit a question via the contact us form.

What is YORK Chiller Access Manager?
YORK Chiller Access Manager is a feature that provides secure access to YORK chiller control panels. Users download the YORK Chiller Access Manager app, create an account, and then use the app to generate dynamic access codes. This feature provides owners control and visibility to who is operating, maintaining, and servicing their chiller—ensuring protection of an asset that is critical to facility operation.

What products is it available on?
Today, YORK Chiller Access Manager is available on new YK, YMC² and YZ water-cooled centrifugal chillers.

I’m an owner, how do I get an access code?
Check out this video to learn more about interacting with YORK Chiller Access Manager, including how to generate a unique access code.
https://youtu.be/Wk58_KFDqtU?si=xXhiFygdY82bk_4o

I’m a third party service contractor, how do I use the YORK Chiller Access Manager tool?
Check out this video to learn more about interacting with the YORK Chiller Access Manager as a third party contractor.
https://youtu.be/XaxXgobNvMs?si=hpoEGuZ3sCMlOs2Z

Who do I contact with more questions?
If you have more questions, submit a form on the contact us page.
https://www.york.com/chilleraccess/support

How does YORK Chiller Access Manager technically work?
YORK Chiller Access Manager is a software application designed for managing and controlling access to YORK chillers. YORK chillers which include that solution are ISASecure certified. The ISASecure certification program is an industry standard for assessing and certifying the cybersecurity of industrial automation and controls systems. Chiller Access Manager allows registered users to generate dynamic chiller access codes. Each chiller is loaded with a unique key which tracks acceptable access codes and stores encrypted information within the access code entered into the chiller control panel. After generating an access code, users type the code into the chiller control panel and can then access features and setpoints needed to operate and maintain the chiller.

Does Chiller Access Manager require chillers to be connected to the internet?
Chiller Access Manager does not require chillers to be connected to the internet, therefore there is no physical or wireless connection required on chillers that use Chiller Access Manager for logging into chiller control panels. The access code is generated by using the YORK Chiller access manager web platform or mobile app and is then input manually into the chiller control panel. 

Can Chiller Access Manager be removed from my chiller?
No. Chiller Access Manager cannot be removed from chillers. It is the standard for securely generating dynamic access codes that can be traced back to a specific user. Chiller Access Manager is in response to Johnson Controls’ customers’ requests to have more secured products to keep their facilities safe. The Chiller Access Manager secured approach is to allow the customer to establish who, (which employees, service contractors, etc.) is to have access, and to be able to track that access - ensuring protection of an asset that is critical to facility operation.

Does Chiller Access Manager application use and store my personal data?
The Chiller Access Manager application only serves as a two-factor authentication (2FA) type of mechanism for accessing the chiller’s onboard control panel. The mobile application has no ability to interface directly with the chiller. There are no mobile activities, data, or metrics being captured during the use of the mobile application.

Users of the Chiller Access Manager web platform and mobile app agree to the Johnson Controls privacy policy and terms and conditions. For more information, visit the links below:

• Johnson Controls Terms and Conditions
• Johnson Controls Privacy Policy

What happens if I need to generate a code over the weekend for my team?
From either the mobile app or web platform, you are able to select a start date in the future (up to 6 months) for an access code. This allows you to plan ahead for the potential need of an access code, even if it is at a time that may be less convenient.

I do not have a connected chiller, am I susceptible to security-attacks?
Even for chillers that are not connected to the internet, threats can occur if it is easy for unauthorized persons to access the chiller control panel and adjust setpoints. Often, well intentioned internal actors can result in a threat if acting with negligence. No matter the intentions, the right person with the wrong access to operational technology such as chillers can cause harm to systems.

In addition to Chiller Access Manager, it is recommended to locate the chiller control panel in a physically secured area with access only to authorized personnel. When applicable, mechanically loc the control panel, remove the keys and store them in a secure location.

Does the app itself need service or internet connection to work?
In order to properly verify your credentials, the Chiller Access Manager app and website will require an internet or cellular data connection. Once an access code has been generated in either platform, there is no need for your device to remain connected to the internet – and at no point does Chiller Access Manager require the chiller to connect to the internet.