Siemens SINAMICS S120 - Generating Your Own Certificates

Basic functions
7.30 Web server
Drive functions
Function Manual, 11/2017, 6SL3097-4AB00-0BP5
463
7.30.11.3
Generating your own certificates
You can either generate your own certificates for the secured data connection (the software
required to do this is not included in the scope of delivery von SINAMICS S120) or purchase
them from a certification authority. In these cases, a server certificate and a private server
key are supplied.
Table 7- 16 Example:
Name of the server certificate
<IP-Addr>.TLS.crt (z. B. 192.168.2.90.TLS.crt)
Name of the private server key
<IP-Addr>.TLS.key (z. B. 192.168.2.90.TLS.key)
Sequence
1. Copy the server certificate (e.g. 192.168.2.90.TLS.crt) and the private server key (e.g.
192.168.2.90.TLS.key) to the memory card of your device
(\OEM\SINAMICS\HMICFG\CERT\).
2. The used certificate must be loaded to the browser of your PC. It is recommended that
you first assign a logical name to the certificate.
– Make a backup copy of your certificate and rename the copy, e.g. as "SINAMICS.crt".
– Import the copied certificate to your browser so that it is known in the PC.
Please follow the instructions (help) in your browser for the exact procedure when
importing.
3. Open an HTTPS Web server connection to your drive in the browser.
– If the certificate has been imported correctly, the required connection is established.
– If the certificate was not imported, a message indicating that the signed CA is
unknown is displayed when you open the browser.