Security Functions For Communication - Siemens Simatic RTU303xC Series Operating Instructions Manual

Application and functions

1.7 Security functions for communication

1.7 Security functions for communication
Security functions for SMS messages, e-mails and FTP
As general protection the RTU supports the following functions:
● Configuration of authorized phone numbers on the RTU
To authorize subscribers that are allowed to establish connection with the RTU by SMS
message or phone call, the phone numbers of the individual subscribers are configured
on the RTU.
● Encryption
For the secure transfer of e-mails and for FTP file transfer the following optional methods
can be used.
– STARTTLS (for e-mails)
– TLS (for FTP)
With both options a certificate is required.
Ask your service provider which options are supported.
When using VPN connections or when using a security module SCALANCE S/M, the
encryption of the protocol is turned off. If as of the endpoint of the tunnel, the connection
leads over further routers make sure that you secure this communication with a security
module.
Security functions of the "TeleControl Basic" protocol
The protocol contains the following Security functions:
● Encrypted communication with the Telecontrol server
As an integrated security function, the telecontrol protocol encrypts the data for transfer
between the RTU and telecontrol server.
The interval for the key exchange between RTU and telecontrol server is set to 1 hour.
● Telecontrol password
For authentication of the RTU at the telecontrol server
Security functions of the "SINAUT ST7" protocol
The RTU uses the transfer protocol "MSCsec" for secure communication.
Security functions of the "DNP3" protocol
The protocol provides secure authorization.
32
Operating Instructions, 06/2019, C79000-G8976-C382-06
RTU303xC