Web Server - Siemens SIMATIC S7-1500 Function Manual

General information
2.2 Configuring the Web server
Permit access only with HTTPS
Note: The activation of the web server using the secure transmission protocol "HTTPS"
requires a valid web server certificate in the CPU. See "Creating and assigning a Web server
certificate" in the section above.
To ensure secure access to the Web server the "Permit access only with HTTPS" check box
is activated in the basic setting of a configured CPU.
The web pages are transmitted by default via a secure connection and are protected from
attacks by third parties. Note that in this case the URL of the CPU starts with "https://".
The requirements for error-free HTTPS access to the CPU are as follows:
● The current date/time must be set in the CPU.
Note
When using secure communication (e.g. HTTPS), make sure that the corresponding
modules have the current time of day and the current date. Otherwise, the modules
evaluate the used certificates as invalid and the secure connection will not be
established.
● The IP address of the CPU must be assigned.
● A valid server certificate offered by the CPU is installed in the Web browser.
If no CA-signed Web server certificate is installed, a warning is output recommending that
you do not use the page. To view the page, you may need to "Add an exception",
depending on the Web browser used.
A valid CA certificate is available for download from the "Intro" web page under
"Download certificate".
You can find instructions for installing the certificate in the help system of your Web
browser and in the FAQ with the entry ID 103528224 at the Service&Support
(https://support.industry.siemens.com/cs/ww/en/view/103528224) website.
Note
To protect against manipulation from the outside, download the certificate only in an
environment that is guaranteed not to be compromised. Installation of the CA certificate has
to be carried out once for each display device you wish to use.
24
NOTICE
Safety-related functions only possible with CA-signed Web server certificate
The safety-relevant functions, backup and restore the configuration of the CPU, see
section Online backup (Page 87), are only possible with a CA-signed web server
certificate.
A valid CA-signed web server certificate in the CPU is also required:
• User management with password-protected users
• Saving and downloading diagnostic information in csv files
To use the full functionality of the Web server, we therefore recommend that you use the
Certificate Manager to create a CA-signed server certificate in the global security
settings and assign it to the CPU.
Function Manual, 11/2019, A5E03484625-AG

Web server