Certificates for local and remote access for IP 427E running WinCC Unified PC RT

0
What certificates might be required for 1507SF controller communicating to Unified PC RT V20 update 1 ? Examples on creating those certificates?   Thanks,   G. Hoyle
asked
1 answers
0

For a 1507SF controller communicating with a Unified PC running WinCC Unified Runtime V20 update 1, the required certificates and their configurations are as follows:

Required Certificates:

  1. PLC Certificate: The S7-1500 controller (or 1507SF) will require its own certificate.
  2. OPC UA Server Certificate: The Unified PC will require an OPC UA Server certificate for secure communication if using OPC UA.

Trust Relationship:

  • One-sided SSL Authentication: The HMI device (Unified PC) must trust the PLC certificate of the S7-1500 controller.
  • Reciprocal SSL Authentication: If using OPC UA, both the Unified PC and the PLC must trust each other’s certificates.

Procedure:

  1. For the PLC Certificate:

    • The PLC sends its certificate to the HMI device (Unified PC).
    • The HMI device checks and must trust the PLC certificate to establish the connection.
    • The PLC certificate is managed internally in the system and automatically trusted by the HMI device when loaded.

  2. For OPC UA Communication:

    • The Unified PC requires an OPC UA Server certificate.
    • The 1507SF controller (acting as an OPC UA client) must trust the OPC UA Server certificate, and vice versa.

Steps to Establish Trust:

  1. For Integrated Connection:

    • Load the HMI device configuration, which includes the PLC certificate.
    • The HMI device automatically trusts the PLC certificate.

  2. For Non-Integrated Connection:

    • Manually trust the PLC certificate if using a non-integrated connection or "ChangeConnection" system function.

  3. For Redundancy (if applicable):

    • Use CA-based certificates, as self-signed certificates are not supported for redundancy.
    • Both Unified PCs in a redundant setup require Collaboration certificates.

Example Procedure for Managing Certificates:

  • Unified PC:
    • Manage third-party certificates via the Unified PC’s settings.
  • Unified Panel:
    • Trust the certificate via the Control Panel or file manager as outlined in your device's manual.

For more detailed guidance, please refer to the following sources:

answered