Security - Siemens Simatic S7-1500/ET 200MP System Manual

System overview
3.4 CPUs
3.4.5

Security

Security means protection of technical systems against sabotage, espionage and human
error.
Protection functions
To set up secure networks, the SIMATIC S7-1500 automation system offers an integrated
security concept from authorization levels up to block protection:
Protection function
Access protection
Know-how protection
Copy protection
Locking the CPU
You can find additional information about security mechanisms of the SIMATIC automation
systems in the "Security" document at SIMATIC S7 controllers
(https://support.industry.siemens.com/cs/ww/en/view/77431846).
Secure Communication
It is becoming increasingly necessary to transfer data to external computers in encrypted
form via Intranet or public networks.
SIMATIC S7-1500 CPUs with firmware version 2.0 and higher support the Internet PKI (RFC
5280) with STEP 7 as of V14. This makes the configuration and the operation of Secure
Communication possible, for example:
● Hypertext Transfer Protocol Secure (HTTPS)
● Secure Open User Communication
● Secure Communication with OPC UA
A public key infrastructure (PKI) can issue, distribute and check digital certificates. For S7-
1500 CPUs, you create certificates for various applications in the CPU properties in STEP 7,
for example: TLS certificates for Secure Open User Communication, Web server certificates,
OPC UA certificates.
Communications processors with integrated security functions
For special requirements of your plant, use communications processors with integrated
security functions such as access protection using a firewall, protection against data
manipulation using VPN, FTPS, HTTPS, SNMPv3 and secure NTP.
52
Description
Protection against unauthorized configuration changes through four authorization levels
and integrated firewall
Protection against unauthorized access and modifications to algorithms by means of pass-
word protection
Protection against duplication of programs by linking individual blocks with the serial num-
ber of the original memory card on the SIMATIC memory card
Protection against unauthorized access by locking the front cover with a seal or a lock
Automation system
System Manual, 12/2017, A5E03461182-AE