TOP Server S7 Plus Ethernet Driver - Secure PLC Communication Certificate
How do I export/import the required security certificate for secure PLC communication between TOP Server and a Siemens S7-1500 PLC?
Requirements:
- TOP Server 6.14.263.0 and newer
- (Siemens S7 Plus Ethernet required - included in Siemens Plus Suite or Manufacturing Suite)
- TIA Portal v17 and newer
- Enabled secure communication
- Firmware V2.9.x for S7-1200/1500 PLCs
- Base-64 encoded communication certificate
To export certificate:
- Open your TIA Portal project
- Browse to the device configuration
- Under the General tab go to Protection and Security > Certificate manager
- Right-click on the communication certificate > Export certificate...
- Save this certificate in a safe location
- Browse for the certificate you just exported and double-click on it
- Go to the Details tab > Copy to File...
- Follow the Wizard > Select "Base-64 encoded X.509 (.CER)" Format > Next
- Give the certificate a name and safe location to save to > Next > Finish
To import certificate:
- Open the TOP Server Administration settings
- Go to the Certificate Store Tab
- Under Features select "Siemens S7 Plus Ethernet"
- Under Extend Trust Store click on Import
- Browse and select the certificate you exported previously (if you encounter "Failed to import certificate" then the certificate was not exported in the correct format)
- Click OK and restart the TOP Server Runtime Service.
TOP Server device configuration setting:
- Browse to the device properties > Communications
- Under Security > Enable "Secure Communication" & "Require Trusted Certificates"
- Type the PLC Password configured in your TIA Portal project
- Apply > OK
Please contact us at support@softwaretoolbox.com for any further assistance.