Siemens SIMATIC S7-1500 Function Manual page 12

General information
2.2 Configuring the Web server
● ② Permit access only with HTTPS
● Access protection
● ③ Automatic updating
12
Note
When projects from deliveries are applied in which the Web server was already
activated and configured on the module, this security notice is not shown.
The websites are transmitted by default via insecure connection and are not protected
from attacks by third parties. If you always want to transmit websites and login information
to the browser in encrypted form, enable the "Permit access only with HTTPS" option in
the CPU properties. Note that the URL of the CPU starts with "https://" in this case.
For error-free https access to the CPU, the following conditions must be met:
– The current time is set on the CPU
– The IP address of the CPU is set (example: https://192.168.3.141)
– A valid certificate is installed in your web browser.
If no certificate is installed, a warning is output recommending that you do not use the
page. To view this page, you must explicitly "Add an exception".
A valid certificate (Certification Authority) is available for download from the "Intro"
website, "Download certificate". Instructions for installing the certificate are available in
the help system of your Web browser.
Note
To protect against manipulation from the outside, download the certificate only in an
environment that is guaranteed not to be compromised. You have to download the
certificate once for each display device you are going to use.
The certificate establishes an encrypted connection that prevents wiretapping or
distortion of the communication but does not provide access protection. This means you
have to protect your CPU from unauthorized access with the corresponding configuration
in the user administration.
Automatic updating is activated in the basic setting of a configured CPU.
The following websites are updated automatically:
– Start page
– Diagnostic buffer
– Module information
– Alarms
– Information about communication
– Topology
Note
The preset update interval is 10 seconds.
Larger amounts of data or several http-/https connections increase the update time.
Function Manual, 01/2013, A5E03484625-01
Web server