MSA fieldserver ProtoNode FPC-N54 Startup Manual page 32

Limiting Client Access
In addition to TLS_Port parameter also add Validate_Client_Cert in the connections section of the
configuration file and set it to "Yes".
Connections
Adapter , Protocol
N1 , Modbus/TCP
The configuration above sets the FieldServer to request and verify a client's certificate against its internal
authority file before accepting connection. By default, this means the FieldServer will only accept
connections from other FieldServers.
In order to load an authority file so that the FieldServer will accept connections from a chosen list of remote
clients, configure the FieldServer with the following connection settings:
Connections
Adapter , Protocol , TLS_Port
N1 , Modbus/TCP , 1502
This configuration has the FieldServer accept connections from clients who have the correct certificate. The
authority file is a collection of client certificates in PEM format. This file can be edited using any text file
editor.
NOTE: Cert_Authority_File is useful only if Validate_Client_Cert is set to 'Yes'.
To Upload the Authority File to the FieldServer
1. Enter the IP address of the FieldServer into a web browser.
2. Choose the 'Setup' option in the Navigation Tree and Select 'File Transfer'.
3. Choose the 'General' tab.
4. Click on the 'Browse' button and select the PEM file you want to upload.
5. Click on 'Submit'.
6. When the message, "The file was uploaded successfully" appears, click on the 'System Restart'
button.
, TLS_Port , Validate_Client_Cert
, 1502 , Yes
, Validate_Client_Cert
, Yes
ProtoNode Start-up Guide
Additional Information
, Cert_Authority_File
, my_authorized_clients.pem
32