Siemens SIMATIC ET 200AL - Page 636

Setting and determining system diagnostics
4.2 Options for displaying system diagnostics
Diagnostics
Function Manual, 09/2016, A5E03735838-AD
51
5. Select the "Activate web server on this module" check box.
6. If possible, always enable the option "Permit access only with HTTPS".
Note the following: The activation of the Web server using the secure transmission
protocol "HTTPS" requires a valid Web server certificate in the CPU.
NOTICE
Utilizing the full functionality of the Web server
A valid CA-signed Web server certificate in the CPU is a requirement for:
• User management with password-protected users
• The use of safety-related functions (online backup and restore of the CPU
configuration, saving and downloading diagnostic information in csv files)
To use the full functionality of the Web server, we recommend that you create a CA-
signed server certificate and assign it to the CPU.
To create a CA-signed Web server certificate, you must enable the Certificate Manager
in the global security settings of STEP 7 and assign a CA-signed server certificate to the
Web server in the properties of the CPU.
You can find additional information on handling Web server certificates in the
"Configuring the Web server" section of the Web server function manual
(http://support.automation.siemens.com/WW/view/en/59193560
).
Detailed information on Certification Authority (CA) certificates, device certificates (End
Entity certificate), "Public Key Infrastructure" (PKI) and certificate management can be
found in the Communication function manual
(https://support.industry.siemens.com/cs/ww/en/view/59192925
) and in the online help
for STEP 7, keyword "Secure communication".
7. Automatic updating is activated in the default setting of a configured CPU.
8. Activate the Web server also for each interface via which you want to access the Web
server.
To do this, open the "Properties" tab in the Inspector window and select the "Web server"
entry in the "General" area navigation. In the "Overview of interfaces" area, select the
"Enabled web server access" check box for the corresponding interface.
9. Compile and load the configuration into the CPU.