5.2 Certificate management
GUID-FFF5C8F8-8227-435E-8E5B-70D37D8E86DC v1
Security Administrator
Normal User
Manually transferred certificate
files
Start secure communication
Replicate users
Login
Change own password
Start secure communication
Deploy certificate to IED
Write Role to Right mapping
Activate CAM
Deactivate CAM
Login
Change own password
IED
PCM600
IEC15000368-1-en.vsdx
SDM600
IEC15000368 V1 EN-US
Figure 21: Overview of the functionality between the products in the system.
Before any distribution of users and roles can take place, a trust relation must be
established. The CAM server, such as the SDM600, also acts as a CA meaning that
it is able to issue digital certificates. Each device, such as an IED, will have its own
unique device certificate, one which must be imported into the PCM600
configuration and then written to the IED. At this point trust is automatically
established directly between the CAM server and the IED. The Security
Administrator is responsible for this setup.
5.2.1 Creating IED certificates
GUID-DBE03CD9-0BA9-48F0-AC9A-8CE1E33AD11B v1
As mention above, SDM600 can be used to create IED certificates. Below follows
a short guide on how to create device certificates.
1. In PCM600, export the Substation Configuration Description (SCD).
Section 5 1MRK 511 399-UEN B
Central Account Management
42 670 series 2.2 IEC
Cyber security deployment guideline
To Next Page
Loading...
Need help?
General
