How To Change The Psk For Encrypted Communication - Siemens PCS 7 Installation Manual

Using encrypted communication for a PC station
1. Select the PC station (My Computer) in the tree view of Windows Explorer.
2. Select the "Simatic Shell" folder.
(Windows 10: Folder "This PC", area "Devices and Drives")
3. Select the "Settings..." command from the shortcut menu.
The "Communication Settings" dialog opens.
4. Enable the "Encrypted communication" check box.
The "Set PSK" dialog box opens.
Note
Changing the PSK
Read the section "How to change the PSK for encrypted communication (Page 117)";
Changing the PSK.
When a pre-shared key is active, you can change it. Click "Set".
5. Enter characters with a high password strength for the PSK.
The key must be at least 8 characters long and include numbers and symbols in addition
to uppercase/lowercase letters.
6. Confirm your entries. Click "OK".
7. If you want to use an available port instead of the port allocated by default, you can specify
the assignment of incoming ports.
8. Check setting for the "Migration mode" check box.
Read the section "How to use migration mode for changing encrypted communication
(Page 119)".
9. Click "OK".
Additional information
● Section "How to access PC stations outside a subnet (Page 112)"
● Online help "Simatic Shell"
5.7.12

How to change the PSK for encrypted communication

The following procedure is only required if you want to change the PSK during ongoing
operation.
Requirements
● Always perform each individual step for all PC stations in the entire plant.
You can find information on the procedure in the section "How to configure encrypted
communication between the PC stations (Page 116)".
● For redundant servers, the redundancy synchronization is completed before each step.
● Process mode is ended on the relevant PC station.
PCS 7 - PC Configuration (V8.2)
Installation Manual, 03/2016, A5E36200050-AB
Installing PC stations
5.7 Preparing PC stations
117