Siemens SINAMICS S120, Function Manual

Page: 460 / 1094

Basic functions
7.30 Web server
Drive functions
460
Function Manual, 11/2017, 6SL3097-4AB00-0BP5
7.30.11 Certificates for the secure data transfer
7.30.11.1 Overview
The "Transport Layer Security" protocol "TLS" enables encrypted data transfer between a
client and the SINAMICS drive. HTTPS access operations between the browser and the
drive is based on the "Transport Layer Security" protocol.
This section informs you which steps you need to follow to enable encrypted data transfer
between a client and SINAMICS.
Protecting the HTTPS access
The encrypted variant of the communication between the browser and the Web server using
HTTPS requires the creation and installation of certificates.
You have three ways of creating a server certificate:
● Use the default configuration
● Use self-created certificates (by means of certificate software such as OpenSSL)
● Use a server certificate from a certificate authority
Key files
You require 2 key files for the encryption technique based on the "Transport Layer Security"
protocol:
● A public certificate
● A private key
The pair of keys is created individually for the appropriate SINAMICS drive interface. This
ensures that the address requested matches the SINAMICS drive reached during the
HTTPS access.
Note
Encrypted access to the SINAMICS drive is only possible with the interface identifier (name
or IP address) specified when the key was created.