SSL Handshake Failed - cannot connect also with android Sm@rtclient

Dear guileser

I have the same problem with a second generation HMI. My TIA PORTAL version is V16 the only difference is that I can not connect also with android Sm@rtclient. I always receive the message "SSL handshake failed". If I power off the HMI and repower it back on then I CAN connect to it through Sm@rtclient android or windows version and any other VNC client (UltraVNC etc). But after some minutes the connection is again impossible and I receive the message "SSL handshake failed".

Do you have any suggestions ?

Thank you in advance

------------------------------------------------------------------------------------------
Split from KTP400 2do generation - Smartserver - SSL Handshake Failed.

Hi!

The SSL-Handshake issue does only appear, if there is some kind of port forwarding implemented when accessing the panel from somewhere in the internet.

Please try to change the external port from 5900 to 5910 which has way less traffic. But be aware, if the port is changed from 5900 to 5910 on the external side, you must also call this new port when the connection shall be done.

I would also recommend upgrading to the latest available update.

Br!

Hi!

in this case only to be confirmed:

- Have you called the new port when the connection shall be done?

- Are you working also with the latest update for the HMI?

https://support.industry.siemens.com/cs/ww/en/view/109746530

Br!

I had the same error, but a slightly different communications set up.

Remote connections are through a VPN.  I could connect with sm@rtclient when inside the network without VPN, but I would get the SSL error if I tried to connect through a VPN.

This was resolved by upgrading the panel firmware to V16.  It was on 15.1 update 4 before.

Also, even though you're using V16 TIA Portal, check that the panel is set up as V16 under the panel properties.  When you copy or upgrade an old project, the HMI panel version does not automatically upgrade.

Dear all 

My project initially was in TiaV16 update 6

Also the Panelk had the latest firmware istalled

The problem existed. 

I upgraded to TiaV17 update 4 and also changed the panel to V17 firmware

The latest firmware for the HMI is in the file KTP700_V17_00_01.fwf (17.00.00.02_01.01  22967.000)

Although I have installed update 4 for panel images from Siemens and I waited for the file to have a 4 in the dercription somewhere, this is actually the latest firmware file which also Siemens Support confirmed. The problem continues to exist even after this even though I have done an image upgrade.

I did the upgade through Tia Portal when I was asked to during the download procedure and also through Prosave by manually selecting the firware file that I mentioned above.

The upgrade of the firmware is completed with no errors and through Prosave when I check what firmware the panel has this is confirmed that if has the latest firmware as you can see in the following picture

.

Both these methods had the same negative result. At first I can communicate with the panel but after some minuts the SSL HANDSHAKE ERROR message reappears. Power on off the HMI and I can communicate again but only for some minutes

From Siemens support they suggested that I changed the ports on the HMI insted of 5900 to put 5850 and istead of 5800 to put 5750 and obviously also to change the prot forwarding rule in my router 5900->5850 and 5800->5750.

I will try this and informe about the results 

Thank you very much for the ideas

Unfortunately I tried what you suggested but The result is the same. Only if I put Enable Empty passwords to ON the I can connect but that is not what i want. Any other suggestions. I repeat that I have thw latest firmware for TIA v17. 

Thank you for trying to help