Importing Digitally Signed Xml Files - Siemens SIMATIC PCS 7 Operating Manual

18.5

Importing digitally signed XML files

Note
Security when performing data exchange via XML format
● Access to the transfer medium/transfer directory:
When using the indirect data exchange via XML format between PAA and PCS 7, ensure
that the transfer medium or the transfer directory of the XML files is only accessible to
authorized persons.
● Digitally signed XML files:
To describe the origin and integrity of the XML data, you can sign the XML file digitally during
the data exchange in XML format. This corresponds to the requirements of the PCS 7
security concept.
By checking the digital signature, you ensure that the XML file on the transfer medium has
not been modified.
The digital signature on the XML file is deactivated by default. Activating the digital signature
is recommended.
See also chapter Overview of data exchange with PCS 7 (Page 15).
Requirement
To import a signed XML file, the certificate of the user that is signing must be available on the
PC. This certificate contains the "Public Key" that is required to identify the signature of the XML
file.
The certificate of the user that is signing must be stored in the Windows "MMC" console under
"Own user > Certificates". The corresponding "CA" certificate must be saved in the "MMC"
console under "Trusted Root Certificates".
Procedure
To use the digital signature in the PCS 7 project, in the plugin "Import / Export PCS 7" in the
"Import" tab in the "Project selection" control group, activate the option "XML signature".
Standards applied
The RSA asymmetric signature procedure is used, according to standard "PKCS#1
www.ietf.org/rfc/rfc3447.txt)". The attributes of the certificate are described in the certificate
definition under "Internet link".
See also
txt2 (http://www.ietf.org/rfc/rfc5280.txt)
Plant Automation Accelerator 3.0
Operating Manual, 04/2019, A5E46351208-AA
Import from PCS 7 to PAA
18.5 Importing digitally signed XML files
(https://
177