Siemens SIMATIC TeleControl DNP3 Configuration Manual page 100

Configuration
3.19 Telecontrol connections
● Security statistics
Specifies whether the statistics of security events are sent to the master. Security events
are authentication requests of the master to the station module. If this option is activated,
all authentication requests are stored in the station module with date, time and result and
sent to the master for further evaluation.
Range of values:
– Do not send security statistics
– Send security statistics
Default setting: Do not send security statistics
● SHA-1 interlock
Setting to select whether the module may use the secure hash algorithm SHA-1 if "SHA-
256" was configured as the Secure hash algorithm and the master does not support SHA-
256.
Range of values:
– SHA-1 mode not allowed
– SHA-1 mode allowed
Default setting: SHA-1 mode not allowed
● Secure hash algorithm (SHA)
Selection of the Secure Hash Algorithm (SHA)
Range of values:
– SHA-1
– SHA-256
Default setting: 256
● Key wrap algorithm
Selection of the Advanced Encryption Standard (AES)
Range of values:
– AES-128
– AES-256
Default setting: AES-128
● Key length
Specifies the length of the pre-shared key in bytes.
The following lengths are used depending on the key wrap algorithm.
– For AES-128: 16 bytes
– For AES-256: 32 bytes
100
The module must not use SHA-1. If the master does not support SHA-256, no
connection will be established.
The module can use SHA-1 if the master does not support SHA-256.
Configuration Manual, 11/2018, C79000-G8976-C508-01
Configuration - DNP3