Generating Server Certificates With Step 7 - Siemens SIMATIC S7-1500 Function Manual

OPC UA communication
9.3 Using the S7-1500 as an OPC UA server
9.3.3.6

Generating server certificates with STEP 7

The description below shows the procedure for generating new certificates with STEP 7 and
applies in principle to various uses of the certificates. STEP 7 sets the appropriate purpose -
in this case "OPC UA Client & Server" - depending on which area of the CPU properties is
used to start the following dialog.
Recommendation: To use the full functionality for the security of the OPC UA server, use the
global security settings.
The global security settings are enabled in the CPU properties under "Protection & Security
> Certificate manager".
Customizing server certificates
STEP 7 automatically generates a certificate for the OPC UA server of the S7-1500 when
you activate the server (see "Activating the OPC UA server (Page 175)"). In the process
STEP 7 uses the default values for the parameters of the certificate. If you want to change
the parameters, follow these steps:
1. Click the Browse button under "General > OPC UA > Server > Security > Secure channel
> Server certificate" in the properties of the CPU. A dialog is displayed that shows the
certificates available locally.
2. Click the "Add" button.
190
Function Manual, 11/2019, A5E03735815-AH
Communication