Security > "Web Server - Siemens SIMATIC S7-400 Operating Instructions Manual

Configuration and operation
4.8 Configuration of the CP in STEP 7 Professional
SNMPv1
The community strings need to be sent along with queries to the CP via SNMPv1.
● "Reading community string"
The string is required for read access.
Leave the preset string "public" or configure a string.
● "Allow write access"
If the option is enabled write access to the CP is released and the corresponding
community string can be edited.
● "Writing community string"
The string is required for write access and can also be used for read access.
Leave the preset string "private" or configure a string.
Note the use of lowercase letters with the preset community strings!
SNMPv3
The algorithms need to be configured for encrypted access to the CP via SNMPv3.
● "Authentication algorithm"
Select the authentication method to be used from the drop-down list.
● "Encryption algorithm"
Select the encryption method to be used from the drop-down list.
Note the information on security of the possible algorithms in the online help of the SCT.
User management
In the user management that you will find in the global security settings, assign the various
users their role.
Below the properties of the roles you can see the rights list of the particular role, for example
the various types of access using SNMP. For new roles, you can freely configure individual
rights.
You will find information on users, roles and the password policy in the information system of
STEP 7.
4.8.9 Security > "Web server"
"Web server"
The CP provides you with the functionality of a web server for access by means of a web
browser. On these HTML pages you will find diagnostics information and service functions.
● Enable Web server on this module
Enable this option in order to be granted access to these HTML pages. This enables port
443 (HTTPS) of the CP.
66
Operating Instructions, 01/2017, C79000-G8976-C427-02
CP 443-1 OPC UA