Siemens SIMATIC RF166C Operating Instructions Manual page 75

Parameter
Validate certificates
Accept
expired
certificates
No strict
validation
Generate OPC UA
server certificate
SIMATIC RF166C
Operating Instructions, 12/2019, C79000-G8976-C578-01
Description
If the check box is selected, the communication module generally checks the
certificate of the communication partner. If the partner certificate is invalid or
not trustworthy, communication is aborted.
If the check box is selected, the communication module checks the validity
period of the communication partner's certificate. If the current internal com-
munication module time is outside the period of validity of the partner certifi-
cate, the certificate is nevertheless accepted and communication established.
If the check box is selected, the communication module also allows communi-
cation in the following situations:
If the IP address of the communication partner is not identical to the IP
•
address in its certificate.
Note: The OPC UA server does not check the IP address of its communi-
cation partner (client).
If no blacklist is stored on the communication module for the CA of the
•
partner certificate.
Regardless of these exceptions, to establish a connection at least the follow-
ing requirements must be met:
If the partner certificate is not trustworthy, the communication module must
•
at least have stored a self-signed certificate of the partner.
If the partner certificate was issued by several CAs (Certification Authori-
•
ties), all CA root certificates must be stored in the certificate store of the
reader.
Button for creating an OPC UA server certificate.
Among other things the server certificate serves to identify the OPC UA server
to the OPC UA client.
The OPC UA server certificate contains the application name, the security
profile and the IP address of the communication module. If any part of this
information is changed, the server certificate needs to be recreated.
Note: Note that the procedure can take several minutes.
Configuration using the WBM
7.3 The menu items of the WBM
75