Changing Settings For Encrypted Communication - Siemens PCS 7 Installation Manual

Installing PC stations
5.7 Preparing PC stations
5. Add the addresses to the list of network partners using the "Add" button.
6. Check if the communication between the subnets needs to be protected. If you want to set
up encrypted communication for a PC station, you can enable this.
Note
Using encrypted communication
If you use encrypted communication, the only PC stations that can communicate with each
other are those that have registered a shared key for the communication connection.
Encrypted communication makes it difficult for potential attackers to determine information
about the process mode or to interfere with process mode.
You can find information on the procedure in the section "How to configure encrypted
communication between the PC stations (Page 116)".
Recommendation:
Enable encrypted communication when communication is to be performed across the
boundaries of the subnet.
7. Confirm your entries with "OK".
See also
Changing settings for encrypted communication (Page 114)
5.7.10

Changing settings for encrypted communication

As of PCS 7 V8.1, you can use encrypted communication between the PC stations (OS and
OS or ES and OS) that are involved in process mode. Encrypted communication makes it
difficult for potential attackers to determine information about the process mode or to interfere
with process mode.
When this method is used, PC stations in process mode exchange a PSK (Pre Shared Key)
for encrypted communication.
● The pre-shared key is an application-specific, shared network key that has been agreed to
beforehand.
● The protection only involves the connection frames required for process mode.
The PSK has no effect on the connection frames from other applications.
You configure encrypted communication in "Simatic Shell".
You can find information on the procedure and PC stations in the section "How to configure
encrypted communication between the PC stations (Page 116)".
114
PCS 7 - PC Configuration (V8.2)
Installation Manual, 03/2016, A5E36200050-AB