Web Server - Siemens SIMATIC S7-1500 Function Manual

General information
2.2 Configuring the Web server
Creating a self-signed server certificate
To create a self-signed Web server certificate, follow these steps:
1. in the Inspector window Properties of the CPU, "General" tab, navigate to the "Web
server > Security" area.
2. Click the "Add" button in the drop-down list to select a certificate.
The "Create a new certificate" dialog opens.
3. Select the "Self-signed" check box in the follow-up dialog.
4. Enter the parameters for the new certificate or confirm the default settings.
– Select "Web server" in the "Usage" box.
– Enter the IP address(es) of the interface(s) or the domain name of the configured CPU
5. Click "OK" to confirm.
6. Compile and load the configuration into the CPU.
The device certificate of the Web server is a component of the configuration.
Creating and assigning a CA-signed Web server certificate
To create a CA-signed Web server certificate, follow these steps:
1. In the Inspector window Properties of the CPU, "General" tab, navigate to the "Protection
& Security > Certificate Manager" area and select the "Use global security settings for
certificate manager" option.
The "Global security settings" appear in the project tree.
Note
To edit the Certificate Manager in the global security settings, you require the "Configure
security" configuration permission.
2. Log on as a user in the project tree in the "Global security settings > User logon" area.
The "Administrator" role is the default for the first logon for a new project.
3. in the Inspector window Properties of the CPU, "General" tab, navigate to the "Web
server > Security" area.
4. Click the "Add" button in the drop-down list to select a certificate.
The "Create a new certificate" dialog opens.
5. In the follow-up dialog, select the "Signed by certificate authority" check box and select
the certificate authority from the drop-down list.
6. Enter the parameters for the new certificate or confirm the default settings.
– Select "Web server" in the "Usage" box.
– Enter the IP address(es) of the interface(s) or the domain name of the configured CPU
7. Click "OK" to confirm.
8. Compile and load the configuration in the CPU.
The device certificate of the Web server and the CA certificate are components of the
configuration.
22
in the "Subject Alternative Name" field.
in the "Subject Alternative Name" field.
Function Manual, 11/2019, A5E03484625-AG

Web server