Pilz 311502, Operating Manual, Page: 29 / 51

Configuration
Operating Manual PCOM sec br2
1004534-EN-04
| 29
To enable communication, the certificate is downloaded to the PC by the user interface and
is imported into the VPN client and web browser. If you use a self-signed CA certificate
when you try to establish a connection to the SecurityBridge, a warning appears saying that
the connection is not secure. In order to establish a connection, you must add a security ex-
ception rule to your web browser.
CAUTION!
Risk of data manipulation
Possible loss of data security.
You may add a security exception rule to your web browser only if you are
sure that you are communicating with the SecurityBridge.
New certificates are generated when the SecurityBridge is reset to its factory settings.
You can also upload your own CA certificate and server certificate with private key.
Certificates and private keys are part of the system configuration and are stored in the act-
ive configuration and start configuration (see Save and secure the configuration [ 31] ).
Certificate download
You can download the CA certificate and server certificate from the user interface to your
PC. You can import the CA certificate into the browser PC (see Install CA certificate) or
VPN Client.
Possible formats:
}
PEM
}
DER
Install CA certificate
To build up a secure connection between the user interface and the SecurityBridge, the CA
certificate from the SecurityBridge must be saved in the web browser as a trustworthy root
certificate. Otherwise, a certificate error will be displayed in the web browser.
Install a CA certificate using Microsoft 7 with Internet Explorer as an example.
1. Download the CA certificate from the user interface and save it to your PC.
2. Double-click the certificate.
The Certificate window is opened.
3. On the General tab, click Install Certificate...
The Certificate Import Wizard window is opened.
4. Click Next . Select the option Place all certificates in the following store and click
Browse.
The Select Certificate Store window is opened.
5. Select Trusted Root Certification Authorities and click OK…
6. Click Next .
7. Click Complete. A safety warning may appear. Confirm that you wish to install the certi-
ficate.