Operation
Ecograph T, RSG35
46
Hauser
Advanced setup -> Application -> WebDAV Client -> Enable -> Yes (SSL)"
or under
"Expert -> Application -> WebDAV Client -> Enable -> Yes (SSL)"
.
Only TLS V1.0 (= SSL 3.1) or TLS V1.1 is supported. Older standards are not supported.
The encryption method is automatically agreed with the counterparty.
A certificate must be installed in order to be able to send encrypted data. These certificates
can be obtained from your WebDAV server service provider. The following file formats are
supported:
• *.CER: DER- or Base64-encoded certificate
• *.CRT: DER- or Base64-encoded certificate
• *.DER: DER-encoded certificate
The file name of the certificate may only contain the following characters: a..z, A..Z,
0..9, +, -, _, #, (, ), !
To establish an SSL connection, the device automatically selects the certificate that best
suits the counterparty from all the installed certificates. An error message is displayed if
the device does not have any of the required certificates.
When WebDAV Client encryption is enabled, no data can be sent if a valid certificate
is not available or if the certificate has expired.
10.9.5 SSL certificates
Importing an SSL certificate
Installing a certificate via SD card or USB stick:
1. Copy a certificate on a PC to an SD card or USB stick
2. Insert the SD card or USB stick into the device
3. In the main menu, select
"Operation -> SD card (or USB stick) -> Import SSL
certificate"
4. Select the required certificate from the list and follow the dialog on the display
Up to 3 certificates can be installed simultaneously.
Verifying the installed SSL certificates
The installed certificates can be verified in the main menu under
"Diagnostics -> Device
information -> SSL certificates"
. The most important certificate information, e.g. subject
key ID, organization and validity period, are displayed in the parameter list.
Not all fields are completed on all the certificates. This is because the parties issuing
the certificates do not make all the information available.
Deleting an SSL certificate
In the main menu select the certificate to be deleted under
"Diagnostics -> Device
information -> SSL certificate -> Certificate"
and select
"Yes"
under
"Delete certificate"
.
Period of validity of certificates
Certificates are valid for a defined period (valid from ... to …). The device checks the
certificate validity once a day or each time the device is rebooted. 14 days before the
certificate expires the device notifies the user daily (by e-mail, screen display, entry in
event log) that the certificate will expire shortly.
If the certificate has expired the alarm relay switches (if activated) and a message is
displayed on the screen. An entry is also made in the event log. If a certificate is deleted all
errors related to this certificate are reset.
