Security > "Certificate Manager; Handling Certificates - Siemens SIMATIC S7-400 Operating Instructions Manual

4.8.12 Security > "Certificate manager"
Assignment of certificates
If you use OPC UA communication with authentication for the CP, you need to import
certificates of the communications partner into the STEP 7 project and download them to the
CP with the configuration data:
1. If applicable import the third-party certificates of all communications partners using the
certificate manager in the global security settings.
2. Then assign the certificates of all its communications partners to the CP using the table
below the local security settings of the CP.
In this table also include the certificates of communications partners whose certificates
were generated in the same STEP 7 project.
For a description of the procedure, refer to the section Handling certificates (Page 73).
4.8.13

Handling certificates

Certificate for authentication
If you have configured secure OPC UA communication with authentication for the CP, own
certificates and certificates of the communications partner will be required for communication
to take place.
All nodes of a STEP 7 project with enabled security functions are supplied with certificates.
The STEP 7 project is the certification authority.
Note
No certificate with security functions disabled.
If the security functions of the CP are disabled in the STEP 7 project, no certificate will be
generated for the CP.
For the server and client application of the CP a common certificate is created. It is displayed
as follows (alternatives) in STEP 7 in "Global security settings > Certificate manager >
Device certificates".
● OPC UA client certificate of the module <CP name>
● OPC UA server certificate of the module <CP name>
● OPC UA client- / server certificate of the module <CP name>
The issuer, validity, use of the certificate (service/application) and the use of a key are
shown in the tale. You can call up further information about the certificate by selecting the
certificate in the table and selecting the shortcut menu "Show".
The "Device certificates" table also shows all other certificates generated by STEP 7 and all
imported certificates.
CP 443-1 OPC UA
Operating Instructions, 01/2017, C79000-G8976-C427-02
4.8 Configuration of the CP in STEP 7 Professional
Configuration and operation
73