Siemens SIMATIC ET 200AL, System Manual

Page: 1046 / 2255

Setting and determining system diagnostics
4.2 Options for displaying system diagnostics
Diagnostics
50
Function Manual, 11/2019, A5E03735838-AF
5. Select the "Activate web server on this module" check box.
6. "Permit access only with HTTPS": The activation of the Web server using the secure
transmission protocol "HTTPS" requires a valid Web server certificate in the CPU.
NOTICE
Utilizing the full functionality of the Web server
A valid CA-signed Web server certificate in the CPU is a requirement for:
•
User management with password-protected users
• Saving and downloading diagnostic information in csv files
•
Using the following safety-related functions:
– Backing up and restoring the CPU configuration
To use the full functionality of the Web server, we recommend that you create a CA-
signed server certificate and assign it to the CPU.
To create a CA-signed Web server certificate, you must enable the Certificate Manager
in the global security settings of STEP 7 and assign a CA-signed server certificate to the
Web server in the properties of the CPU.
You can find additional information on handling Web server certificates in the
"Configuring the Web server" section of the Web server function manual
( http://support.automation.siemens.com/WW/view/en/59193560 ).
Detailed information on Certification Authority (CA) certificates, device certificates (End
Entity certificate), "Public Key Infrastructure" (PKI) and certificate management can be
found in the Communication function manual
( https://support.industry.siemens.com/cs/ww/en/view/59192925 ) and in the online help
for STEP 7, keyword "Secure communication".
7. Automatic updating is activated in the default setting of a configured CPU.
8. Activate the Web server also for each interface via which you want to access the Web
server.
To do this, open the "Properties" tab in the Inspector window and select the "Web server"
entry in the "General" area navigation. In the "Overview of interfaces" area, select the
"Enabled web server access" check box for the corresponding interface.
9. Compile and load the configuration into the CPU.