Security > Vpn > Sinema Remote Connect - Siemens SIMATIC TeleControl DNP3 Configuration Manual

SINEMA Remote Connect (CP)
B.4 Security > VPN > SINEMA Remote Connect
B.4 Security > VPN > SINEMA Remote Connect
Remote maintenance with SINEMA Remote Connect (SINEMA RC)
The application "SINEMA Remote Connect" (SINEMA RC) is available for remote
maintenance purposes.
SINEMA RC uses OpenVPN for encryption of the data. The center of the communication is
SINEMA RC Server via which communication runs between the subscribers and that
manages the configuration of the communications system.
Preparatory steps
Execute the following steps before start configuring the SINEMA RC connection of the
module in STEP 7. They are the prerequisite for a consistent STEP 7 project.
● Configuration of SINEMA Remote Connect - Server
Configure SINEMA RC - Server as necessary (not in STEP 7). The communication
module and its communication partners must be configured in the SINEMA RC Server.
● Exporting the CA certificate (optional)
If you want to use the server certificate as authentication method of the communication
module during connection establishment, export the CA certificate from SINEMA RC -
Server. Then import the CA certificate from SINEMA RC - Server to the engineering
station.
Alternatively, you can use the fingerprint of the server certificate as authentication method
of the communication module.
Note
Recommended authentication method:
The recommended authentication method is the one using the CA certificate. The certificate
is valid for 10 years.
The fingerprint, on the other hand, is derived from the server certificate. Its validity may be
significantly shorter.
Configuration of SINEMA Remote Connect
Importing your own certificate
1. Navigate to the parameter group "Security > Certificate manager".
2. Open the certificate selection dialog with a double-click on the first free table row of the
local certificate manager.
3. Select the CA certificate of SINEMA RC - Server.
Then navigate to the parameter group "Security > VPN".
164
Configuration Manual, 11/2018, C79000-G8976-C508-01
Configuration - DNP3