Siemens SINUMERIK 840DE sl Commissioning Manual page 936

Setting up of OPC UA server
3.3 Commissioning
Note
Assigning secure passwords
Observe the following rules when creating new passwords:
● When assigning new passwords, ensure that you do not assign passwords that can be
● Passwords must always contain a combination of upper-case and lower-case letters as
● Wherever possible and where it is supported by the IT systems, a password must always
The German Federal Office for IT Security (BSI)
Downloads/DE/BSI/Grundschutz/International/GSK_15_EL_EN_Draft.pdf?
__blob=publicationFile&v=2) provides additional rules for creating secure passwords.
Programs are available that can help you to manage your passwords. Using these
programs, you can encrypt, save and manage your passwords and secret numbers – and
also create secure passwords.
Note
If you want to change the administrator password later, you can do this via the OPC UA
method "ChangeMyPassword" or in the SINUMERIK Operate screen.
20
NOTICE
Security risk due to data manipulation and data sniffing
Anonymous access can be a security risk. Anonymous access should therefore be strictly
limited to commissioning.
● For normal operation authentication via username and password or based on
certificates should be used (see chapter Certificate handling (Page 22)).
NOTICE
Security risk due to data manipulation and data sniffing
If no message encryption to the client is established, there will be a security risk of data
manipulation and data sniffing. It is therefore highly recommended to establish a message
encryption to the client.
● Use the highest possible encryption standard (256 bit) to ensure a secure message
transfer.
guessed, e.g. simple words, key combinations that can be easily guessed, etc.
well as numbers and special characters. Passwords must comprise at least eight
characters. The server does not support passwords comprising less than eight
characters. PINS must comprise an arbitrary sequence of digits.
have a character sequence as complex as possible.
(https://www.bsi.bund.de/SharedDocs/
SINUMERIK Integrate for Engineering Access MyMachine / OPC UA
Configuration Manual, 12/2017, 6FC5397-1DP40-6BA1