Siemens CIM - Certificates

Web-based configuration
5.4 Web pages
CIM
78 Operating Manual, 11/2022, A5E51250518-AC
Enable S7/Modbus TCP/Modbus RTU/NTP
When you enable the protocols, the settings of these protocols revert to the settings before
disabling.
Disable S7/Modbus TCP/Modbus RTU/NTP
if you disabled a protocol, CIM cannot work as either a server or a client.
Note
RESTful API has no authentication
RESTful API is not safe. If you enabled the RESTful API, a device can connect to CIM by Restful
API without authentication.
Only enable the RESTful API when needed.
5.4.9.2 Certificates
Before building connection with CIM, you need to select the certificate first.
• Owned certificate: generate and select certificate for setting up a secured web server and
an SGLAN server
• Trusted certificate: select certificate for SGLAN client
Owned certificates
CIM provides three kinds of certificate solution for securely accessing Web configuration and
setting up SGLAN server. CIM Build-in certificate is the default solution.
Certificate solution
Source
Size restricts (bytes)
CIM Build-in certificate
Signed by LOGO! Base module
1024
CIM internal certificate
Generated by CIM
1024
External certificate
Upload to CIM by you
4000
No matter which solution you select, make sure you install the certificate to your operating
system or browser (Page 42) before using the Web-based configuration.
Note
Siemens recommends you clear browser cache and restart the browser after you installed the
certificate.
It takes about one minute for the certificate to take effect. Wait one minute before logging in
the web-based configuration after you installed the certificate.