MA-025 – DGA 900 Operator Guide – Rev 2.0 12-Apr-19 Page 71 of 92
Note: SSL certificates are small data files that digitally bind a cryptographic key to an
organization's details. When installed on a web server, it activates the padlock
and the HTTPS protocol and allows secure connections from a web server to a
browser.
Note: If HTTPS is disabled, the certificate will be applied when HTTPS is enabled.
Note: The HMI has no automatic redirection between HTTP and HTTPS (or vice versa).
This results in the following browser message “Site cannot be reached over
HTTP”.
A.3.1 Enable/disable Modbus-TCP protocol
▪ Use the HMI to login as either ‘Administrator’ or ‘Operator’.
▪ Select Settings > Communication Services.
▪ Select the Modbus-TCP Enable slider button to enable/disable the Modbus-TCP
protocol.
▪ Click the ‘Save’ button in the application header to apply the changes.
▪ Restart the DGA 900.
A.3.2 Enable/disable SSH service (root access over SSH)
▪ Use the HMI to login as either ‘Administrator’ or ‘Operator’.
▪ Select Settings > Communication Services.
▪ Select the SSH Enable slider button to enable/disable the Secure Socket Shell service.
▪ Click the ‘Save’ button in the application header to apply the changes.
▪ Restart the DGA 900.
A.3.3 Enable/disable HTTPS protocol
▪ Use the HMI to login as either ‘Administrator’ or ‘Operator’.
▪ Select Settings > Communication Services.
▪ Select the Enable HTTPS slider button to enable/disable the HTTPS protocol.
▪ Click the ‘Save’ button in the application header to apply the changes.
▪ Restart the DGA 900.
Note: The HMI has no automatic redirection between HTTP and HTTPS (or vice versa).
This results in the following browser message “Site cannot be reached over
HTTP”.
A.3.4 Apply customer certificates for HTTPS
▪ Use the HMI to login as either ‘Administrator’ or ‘Operator’.
▪ Select Settings > Communication Services.
▪ To implement a custom security policy, upload a new certificate to replace the GE self-
signed certificate and enable HTTPS requests only.