Siemens SIMATIC S7-400 Operating Instructions Manual page 74

Configuration and operation
4.8 Configuration of the CP in STEP 7 Professional
If the CP communicates with non-Siemens partners when the security functions are enabled,
the relevant certificates of the communications partners must be exchanged. To do this,
follow the steps below:
1. Import third-party certificates from communications partners
⇒ Global security settings of the project (certificate manager)
2. Assign certificates locally
⇒ Local security settings of the CP ("Certificate manager" table)
These two steps are described in the next two sections.
Import third-party certificates from communications partners
Import the certificates of the communications partners of third-party vendors using the
certificate manager in the global security settings. Follow the steps outlined below:
1. Save the third-party certificate in the file system of the PC of the connected ES.
2. In the STEP 7 project open the global certificate manager:
Global security settings > Certificate manager
3. Open the "Trusted certificates and root certification authorities" tab.
4. Click in a row of the table can select the shortcut menu "Import".
5. In the dialog that opens, import the certificate from the file system of the ES into the
STEP 7 project.
Assign certificates locally
To be able to use an imported certificate for the CP, you need to specify it in the "Security"
parameter group of the CP. Follow the steps outlined below:
1. In the STEP 7 project select the CP.
2. Navigate to the parameter group "Security > Certificate manager".
3. In the table, double-click on the cell with the entry "<Add new>".
The "Certificate manager" table of the Global security settings is displayed.
4. In the table. select the required third-party certificate and to adopt it click the green check
mark below the table.
The selected certificate is displayed in the local table of the CP.
Only now will the third-party certificate be used for the CP.
Exporting certificates for applications of third-party vendors (e.g. logging server)
For communication with applications of third-party vendors, the third-party application
generally also requires the certificate of the CP.
74
Operating Instructions, 01/2017, C79000-G8976-C427-02
CP 443-1 OPC UA