Configuration
4.8 Security
CP 1243-1
Operating Instructions, 12/2016, C79000-G8976-C365-02
55
●
"Writing community string"
The string is required for write access and can also be used for read access.
Leave the preset string "private" or configure a string.
Note the use of lowercase letters with the preset community strings!
The algorithms need to be configured for encrypted access to the CP via SNMPv3.
●
"Authentication algorithm"
Select the authentication method to be used from the drop-down list.
●
Select the encryption method to be used from the drop-down list.
Note the information on security of the possible algorithms in the online help of the SCT.
In the user management that you will find in the global security settings, assign the various
users their role.
Below the properties of the roles you can see the rights list of the particular role, for example
the various types of access using SNMP. For new roles, you can freely configure individual
rights.
You will find information on users, roles and the password policy in the information system of
STEP 7.
Certificate manager
Assignment of certificates
If you use communication with authentication for the CP, for example SSL/TLS for secure
transfer of e-mails, certificates are required. You need to import certificates of non-Siemens
communications partners into the STEP 7 project and download them to the CP with the
configuration data:
1. Import the certificates of the communications partners using the certificate manager in the
global security settings.
2. Then assign the imported certificates to the CP in the table below the local security
settings of the CP.
For a description of the procedure, refer to the section Handling certificates (Page 56).
You will find further information in the STEP 7 information system.