- When the web server (HTTPS) certificate expires for the WebRH website, the NET::ERR_CERT_DATE_INVALID error will be displayed when trying to access the https://hostname/WebRH web page. Note that HTTPS web traffic and OPC UA use separate certificates.
- In the web browser, it is possible to confirm the certificate validity period but also the issuer and the receiver. Both can be the same as the current hostname.
- In WinCC Certificate Manager, create a new certificate authority under CA configuration, keeping the Siemens.Automation.WinCCUnified Project CA default name and add the country (e.g., GB) as well the password and lifetime.
- Add the device node of the SCADA Server by right-clicking on Siemens.Automation.WinCCUnified Project CA and selecting Add device...
- Right-click on the new device and select Add Web Server Certificate. Set the desired lifetime.
- Generate the new Web server Certificate.
- Click on Install all certificates so the new certificate will appear at the Installed Certificates at bottom left of the screen, along with the existing certificates.
- Open WinCC Unified Configuration and select the newly created Web certificate. Click Next to finish the installation, the other settings can remain as Keep the existing configuration.
- That is the configuration to be done in the SCADA Server. To import the certificate in the SCADA Clients, it is required to export the Root CA from the WinCC Unified Certificate Manager by right-clicking in the root authority Siemens.Automation.WinCCUnified Project CA and exporting the certificate in .DER format.
- Copy the .DER file into the Client PC, double click on the certificate and click Install Certificate.
- Follow the wizard and select Local Machine, then click on Browse to place all certificates in the following store > Trusted Root Certification Authorities.
- Test the web browser in the Client and navigate to https://serverhostname/umc-sso/. The UMC SSO login page should securely without the swaclogin unavailable error.
No comments:
Post a Comment