Industrial cybersecurity
4.9 Secure operation of CPUs
S7-1500R/H redundant system
50 System Manual, 01/2024, A5E41814787-AF
• Modify and reset the password for protecting confidential configuration data.
You can find information on the following topics in the Communication Function Manual
(https://support.industry.siemens.com/cs/ww/en/view/59192925):
– Description of how to change the password
– Description of how to delete or reset the password
– Description of how to assign the password via a SIMATIC Memory Card
• Access to a password-protected CPU can be configured through the display, if the CPU has
a display; see section Using the display to set additional password protection (Page 354).
• For user management and access control, use the Local user management (Page 342).
• Using a password provider: In STEP 7, you can set up a password provider. Refer to section
Know-how protection (Page 355).
• Alternatively, commercially available password management programs can be used.
4.9.2.4 Setting protection levels
For detailed information about setting up protection levels for the CPU and assigning user
authorizations, refer to the section Configuring access protection for the CPU (Page 350) and
the STEP 7 online help (TIA Portal).
4.9.2.5 Certificate management
You can find all relevant information about "Certificate management" in the Communication
Function Manual (https://support.industry.siemens.com/cs/ww/en/view/59192925).
4.9.3 Protection functions
Integrated protection functions of the CPU protect against unauthorized access.
You can find an overview of the protection functions supported by your CPU in the respective
Equipment Manual.
A description of the protection functions and their activation can be found in the section
Protection (Page 341).
4.9.4 Web API of the Web server
The S7-1500R/H CPUs support the Web API of the Web server.
It comes with built-in security features:
• Access via the secure transmission protocol "HTTPS" using the CA-signed Web server
certificate
• User authorization you can configure by means of user list
• Activation for specific interfaces
The functions are described in detail in the Web server
(https://support.industry.siemens.com/cs/ww/en/view/59193560) Function Manual.
To Next Page
Loading...
Need help?
General
