Web Server - Siemens SIMATIC S7-1500 Function Manual

Creating and assigning a Web server certificate
The activation of the web server using the secure transmission protocol "HTTPS" requires a
valid web server certificate.
For SIMATIC S7-1500 CPUs with firmware V2.0 or higher, you must create the certificate for
the web server of the CPU yourself with STEP 7 and assign it to the web server in the
properties of the CPU. This certificate is also downloaded to the CPU automatically when the
hardware configuration is downloaded. STEP 7 itself has a Certification Authority (CA)
certificate, with which the device certificate (end-entity certificate) of the web server is
signed.
Note
When you update the firmware of a SIMATIC S7-1500 CPU or ET 200SP with firmware
version < V2.0 to a firmware version ≥ V2.0, a valid server certificate is automatically
generated and used. The same applies to the replacement parts scenario in which a newer
CPU replaces a CPU with firmware version < V2.0.
You can create different Web server certificates:
● If you use the certificate manager in the global security settings, the certificate authority of
the project (CA certificate) signs the device certificate of the Web server. During loading,
the CA certificate of the project is automatically loaded as well.
● If you do not use the certificate manager in the global security settings, STEP 7 generates
the device certificate as a self-signed certificate.
NOTICE
Utilizing the full functionality of the Web server
A valid CA-signed Web server certificate in the CPU is a requirement for:
• User management with password-protected users
• Saving and downloading diagnostic information in csv files
• Using the following safety-related functions:
To use the full functionality of the Web server, we therefore recommend that you use the
Certificate Manager to create a CA-signed server certificate in the global security settings
and assign it to the CPU.

Web server

Function Manual, 11/2019, A5E03484625-AG
– Backing up and restoring the CPU configuration
General information
2.2 Configuring the Web server
21