Siemens PCS 7 - How to Configure Encrypted Communication Between the PC Stations

The following are typical situations in which you change the settings for encrypted
communication:
● When a plant experiences a standstill
It is assumed that the communication can fail between any PC stations.
● During ongoing operation of the plant
It is assumed that process mode must always be continually running.
Typical situations:
– Changing settings for encrypted communication
– Software update
Note
Communication between computers with encrypted and unencrypted communication is
only possible in migration mode. You can find additional information on migration mode in
the section "How to use migration mode for changing encrypted communication
(Page 119)".
● Changing password for encrypted communication (changing a PSK in a plant)
You can find information on this in the section "How to change the PSK for encrypted
communication (Page 117)".
Additional information
● Section "How to access PC stations outside a subnet (Page 112)"
5.7.11 How to configure encrypted communication between the PC stations
You can enable encrypted communication for the stations that actively engage in process
mode:
● Operator station
● Engineering station
● SIMATIC Route Control
● SIMATIC BATCH
Requirements
● If you want to change settings for encrypted communication in process mode of the plant,
read the following section:"Changing settings for encrypted communication (Page 114)".
● For redundant servers, the redundancy synchronization is completed before each step.
● Process mode is ended on the relevant PC station.
Installing PC stations
5.7 Preparing PC stations
PCS 7 - PC Configuration (V8.2)
116 Installation Manual, 03/2016, A5E36200050-AB