Siemens SIMATIC TeleControl DNP3 Configuration Manual page 82

Configuration
3.17 Security (CP) and certificates
If the module communicates with non-Siemens partners when the security functions are
enabled, the relevant certificates of the communications partners must be exchanged. To do
this, follow the steps below:
1. Importing third-party certificates from communications partners
⇒ Global security settings of the project (certificate manager)
2. Assigning certificates locally
⇒ Local security settings of the module ("Certificate manager" table)
These two steps are described in the next two sections.
Importing third-party certificates from communications partners
Import the certificates of the communications partners of third-party vendors using the
certificate manager in the global security settings of the STEP 7 project. Follow the steps
outlined below:
1. Save the third-party certificate in the file system of the PC of the connected engineering
station.
2. In the STEP 7 project open the global certificate manager:
Global security settings > Certificate manager
3. Open the "Trusted certificates and root certification authorities" tab.
4. Click in a row of the table can select the shortcut menu "Import".
5. In the dialog that opens, import the certificate from the file system of the engineering
station into the STEP 7 project.
Assigning certificates locally
To be able to use an imported certificate for the TIM, you need to specify it in the "Security"
parameter group of the TIM. Follow the steps outlined below:
1. In the STEP 7 project select the module.
2. Navigate to the parameter group "Security > Certificate manager".
3. In the table, double-click on the cell with the entry "<Add new>".
The "Certificate manager" table of the Global security settings is displayed.
4. In the table. select the required third-party certificate and to adopt it click the green check
mark below the table.
The selected certificate is displayed in the local table of the module.
Only now will the third-party certificate be used for the module.
Exporting certificates for applications of third-party vendors
For communication with applications of third-party vendors, the third-party application
generally also requires the certificate of the module.
82
Configuration Manual, 11/2018, C79000-G8976-C508-01
Configuration - DNP3