Frequently Asked Questions (Faqs) - Siemens SR640XA User Manual

RUGGEDCOM
Application Note
Frequently Asked Questions
(FAQs)
Q: What should I do if my root CA's certificate has expired or I have a new root CA in my organization?
A:
If the existing root CA's certificate has expired or if you want to sign all of your existing device certificates
using a new root CA, then all the device certificates has to be replaced with a new certificate signed by the
new root CA. Follow the steps described in scenario 1 or scenario 2 (depending on your setup) to generate
the root CA certificate and device certificate. Upload the new device certificates to ROS devices.
Q: How should I replace a device certificate after expiry or how should I generate a certificate for a new
device?
A: If there is a new device in your organization which has to be signed or if a certificate for a device has to be
regenerated after expiry, refer to one of the three scenarios (depending on your setup) described in the SSL
certificates section of this document. Open the ` SSL_certs` folder and delete the expired device certificates
if necessary and then open the `device_data.txt` file to add new device name. When creating certificates for
new devices if you do not want to recreate device certificates for the existing devices for which certificates
were previously created and uploaded, you can delete the old device names from the device_data.txt.
Note that if you need to follow scenario 1 and you already have a valid Root CA in the SSL_certs folder,
there is no need to run 1_ssl_root_CA_certgen.vbs script to generate a Root CA and in this case set the
value for the `CREATE_ROOTCA=1` in the config.txt. Follow all of the remaining steps described in the test
scenarios.
Q: Do I need to use these scripts or OpenSSL? Is there another approach?
A:
Customers are free to use any key/certificate generation software they choose.

Frequently Asked Questions (FAQs)

Chapter 9
27