Siemens SIMATIC S7-400 Operating Instructions Manual page 58

Configuration and operation
4.7 Configuration of the CP in STEP 7 V5
Regardless of these exceptions, to establish a connection, at least the following
requirements must be met:
– The application URI sent by the requesting client must match the URI of the server
– If the partner certificate is not trustworthy, the CP must at least have stored a self-
– If the partner certificate was issued by several CAs, all CAs must be saved in the
● Do not check period of validity
If the option is enabled, the CP checks the certificate of the communications partner. The
CP also allows communication in the following situation:
– The current time on the CP is outside the period of validity of the partner certificate.
If none of the options is enabled, no certificates are checked.
Note the information in the section Handling certificates (Page 59) on the establishment of
communication.
Special features for the client application
If you use the client function of the CP, note the following:
The value of the parameter "CheckServerCertificate" that you programmed in the connection
information (UASessionConnectInfo) for the client program block "UA_Connect" is
overwritten by the settings for the certificate check in the SCT. If the client is to check the
certificates of the communications partner (server), you can ignore the parameter in the UDT
"UASessionConnectInfo". For the certificate check only the settings in the SCT tab
"Certificate validation" are relevant.
"S7 communication"
In this tab you make the settings for S7 communication via the CP and for protecting LAN
access to the pages of the S7 special diagnostics.
● Disable S7 communication
If the option is enabled, S7 communication via the CP is blocked.
● Disable online diagnostics via LAN
If the option is enabled, access via LAN to the diagnostics pages of the S7 special
diagnostics is blocked.
"User management"
Apart from access via the STEP 7 tabs "SNMP" and "Web", you can access user
management in the open SCT with the menu command "Options" > "User management...".
In user management you assign individual users a role. The individual roles provide specific
rights for various services.
You will find information on individual parameters in the online help of the SCT.
58
application of the CP.
signed certificate of the partner.
certificate store of the CP.
Operating Instructions, 01/2017, C79000-G8976-C427-02
CP 443-1 OPC UA