Table of Contents
Advertisement
Security recommendations
Passwords
● Activate user management and create new user profiles.
● Change all default passwords for users before operating the device.
● Only use passwords with high password strength. Avoid weak passwords, e.g.
password1, 123456789, abcdefgh.
● Define rules for using devices and assigning passwords.
● Make sure that all passwords are protected and inaccessible to unauthorized personnel.
● Do not use the same password for different users and systems.
● Update passwords and keys regularly to improve security.
Keys and certificates
This section deals with the security keys and certificates that you need to set up SSL.
● We urgently recommend creating your own SSL certificates and making them available.
Preset certificates and keys are present in the device.
The preset and automatically created SSL certificates are self-signed. We recommend
using certificates signed either by a reliable external certification authority or an internal
certification authority.
The device has an interface via which you can import certificates and keys.
● We recommend using certificates with a key length of at least 2048 bits.
● If protocols support both certificates and keys, you should favor certificates.
● The following certificate formats are supported for the import:
1)
10
Certificate
HTTPS
OPC UA server
OPC UA client
OPC UA CA
OPC UA issuer
May contain a private key.
Supported formats
*.p12
*.pfx
*.pem
1)
*.cer
*.cert
*.der
*.pem
1)
*.cer
*.cert
*.der
Operating Instructions, 12/2019, C79000-G8976-C578-01
SIMATIC RF166C
Advertisement
Table of Contents
