Certificates For The Secure Data Transfer; Overview - Siemens SINAMICS S120 Function Manual

Basic functions
7.28 Web server
5. If the know-how protection was not activated, you can now finely adjust the configuration
for the individual drives.
If the know-how protection was activated, you require a password for the fine adjustment
of all parameters on the individual drives that are not listed in the exception list.
Note
You can find detailed information about the following parameters in the SINAMICS
S120/S150 List Manual in Section "Parameters for write protection and know-how
protection":
• Parameters that can be changed with active know-how protection,
• Parameters that can only be read with active know-how protection,
6. Activate the know-how and copy protection for the individual drives, if required.
7.28.11

Certificates for the secure data transfer

7.28.11.1

Overview

The Secure Socket Layer protocol (SSL) enables encrypted data transfer between a client
and the SINAMICS drive. HTTPS access between the browser and the drive is based on the
Secure Socket Layer protocol.
This section informs you which steps you need to follow to enable encrypted data transfer
between a client and SINAMICS.
Protecting the HTTPS access
The encrypted variant of the communication between the browser and the Web server using
HTTPS requires the creation and installation of certificates.
You have three ways of creating a server certificate:
● Use the default configuration
● Use self-created certificates (by means of certificate software such as OpenSSL)
● Use a server certificate from a certificate authority
Key files
You need two key files for the encryption method used by the Secure Socket Layer protocol.
● A public certificate
● A private key
418
see Section "Parameters with KHP_WRITE_NO_LOCK"
see Section "Parameters with KHP_ACTIVE_READ"
Function Manual, (FH1), 04/2014, 6SL3097-4AB00-0BP4
Drive functions