Enabling The Web Server - Siemens S7-1200 System Manual

Hide thumbs Also See for S7-1200:

Table of Contents

Enabling the Web server

You enable the Web server in STEP 7 from Device Configuration for the CPU to which you

intend to connect.

To enable the Web server, follow these steps:

1. Select the CPU in the Device Configuration view.

2. In the inspector window, select "Web server" from the CPU properties.

3. Select the check box for "Activate web server on this module".

4. To require secure access to the Web server, select the "Permit access only with HTTPS"

After you download the device configuration, you can use the standard Web pages to access

the CPU. If you select "Enable" for "Automatic update", standard Web pages refresh every

ten seconds.

S7-1200 Programmable controller

System Manual, 03/2014, A5E02486680-AG

Unauthorized access to the CPU through the Web server

Unauthorized access to the CPU or changing PLC variables to invalid values could

disrupt process operation and could result in death, severe personal injury and/or

property damage.

Because enabling the Web server allows authorized users to perform operating mode

changes, writes to PLC data, and firmware updates, Siemens recommends that you

observe the following security practices:

• Enable access to the Web server only with the HTTPS protocol.

• Password-protect Web server user IDs (Page 604) with a strong password. Strong

passwords are at least ten characters in length, mix letters, numbers, and special

characters, are not words that can be found in a dictionary, and are not names or

identifiers that can be derived from personal information. Keep the password secret

and change it frequently.

• Do not extend the default minimum privileges of the "Everybody" user.

• Perform error-checking and range-checking on your variables in your program logic

because Web page users can change PLC variables to invalid values.

• Use a secure Virtual Private Network (VPN) to connect to the S7-1200 PLC Web

server from a location outside your protected network.

11.1 Enabling the Web server