![GE Kelman DGA900 Operator'S Manual Download Page 71](http://html.mh-extra.com/html/ge/kelman-dga900/kelman-dga900_operators-manual_128395071.webp)
MA-025
–
DGA 900 Operator Guide
–
Rev 2.0
12-Apr-19
Page 71 of 92
Note:
SSL certificates are small data files that digitally bind a cryptographic key to an
organization's details. When installed on a web server, it activates the padlock
and the HTTPS protocol and allows secure connections from a web server to a
browser.
Note:
If HTTPS is disabled, the certificate will be applied when HTTPS is enabled.
Note:
The HMI has no automatic redirection between HTTP and HTTPS (or vice versa).
This results in the following browser message
“Si
te cannot be reached over
HTTP”.
A.3.1
Enable/disable Modbus-TCP protocol
▪
Use the HMI to login as
either ‘A
dministrator
’
or
‘O
perator
’
.
▪
Select
Settings > Communication Services
.
▪
Select the Modbus-TCP
Enable
slider button to enable/disable the Modbus-TCP
protocol.
▪
Click the
‘
Save
’
button
in the application header to apply the changes.
▪
Restart the DGA 900.
A.3.2
Enable/disable SSH service (root access over SSH)
▪
Use the HMI to login as
either ‘A
dministrator
’
or
‘O
perator
’.
▪
Select
Settings > Communication Services
.
▪
Select the SSH
Enable
slider button to enable/disable the Secure Socket Shell service.
▪
Click the
‘
Save
’
button
in the application header to apply the changes.
▪
Restart the DGA 900.
A.3.3
Enable/disable HTTPS protocol
▪
Use the HMI to login as
either ‘A
dministrator
’
or
‘O
perator
’.
▪
Select
Settings > Communication Services
.
▪
Select the
Enable HTTPS
slider button to enable/disable the HTTPS protocol.
▪
Click the
‘
Save
’
button
in the application header to apply the changes.
▪
Restart the DGA 900.
Note:
The HMI has no automatic redirection between HTTP and HTTPS (or vice versa).
This results in the following browser message
“Si
te cannot be reached over
HTTP”.
A.3.4
Apply customer certificates for HTTPS
▪
Use the HMI to login as
either ‘A
dministrator
’
or
‘O
perator
’.
▪
Select
Settings > Communication Services
.
▪
To implement a custom security policy, upload a new certificate to replace the GE self-
signed certificate and enable HTTPS requests only.