Siemens ET 200SP Operating Instructions Manual page 93

The local certificate manager
Certificates that were imported via the certificate manager in the global security settings are
not automatically assigned to the corresponding modules. Imported certificates must be
included in the list of trustworthy partner certificates manually via the entry "Certificate
manager" in the local Security settings. When assigning a CA certificate the module is also
assigned the certificates derived from it.
Parameter group "Security" > table "Certificate manager"
Via the local certificate manager assign certificates to the CP for certain services (e.g.
secure sending of e-mails).
1. To do this, click the table cell "Add new".
2. Click on the button on a white background "...".
3. In the certificate list that opens, you can either add a new certificate using the "Add"
button or select an existing certificate of the project using the check mark symbol.
You can recognize the properties of the displayed certificates in the global certificate
manager.
Certificates for the CP 1542SP-1 IRC
Requirement in the global security settings
For the secure sending of e-mails, import the certificate of the e-mail service provider into the
certificate manager.
Assign the certificate in the CP configuration
Select the following certificate in the CP configuration:
● Table "Trustworthy client certificates":
The certificate of the e-mail service provider
Certificates for the CP 1543SP-1
Before certificates can be referenced in the program blocks for Secure Communication,
these certificates must be assigned to the Security module as device certificates via the local
certificate manager.
Requirement in the global security settings
To be able to assign the CP certificate of a communications partner, you need to first import
the certificates of the partner in the global certificate manager (Global security settings).
To make the assigned certificate known to the partner module, this certificate must be
entered in the list of trustworthy partner certificates after import.
CP 1542SP-1, CP 1542SP-1 IRC, CP 1543SP-1
Operating Instructions, 01/2017, C79000-G8976-C426-03
4.7 Table "Certificate manager" (CP 1542SP-1 IRC, CP 1543SP-1)
Configuration and operation
93