I dont know if this is the right category within the forum. However:

Can anyone point me to a well explained, clear documentation on how to properly setup all certificates for WinCC Unified? We use WinCC Unified on PC connceted to our plants. However, there is a lot of trouble all the time with those certificates, where I get a blank screen in WinCC Unfied in the browser, no login promt, a black screen, swaclogin error, sometimes the website does not load at all, sometimes it is marked as unsafe, sometimes as safe but still wont work, sometimes the user interface loads but does not conncet to the plc variables.

WinCC does never really work and there are no error messeges that indicate what is wrong or misconfigured. I did dig throug a lot of the Siemens help PDF files scattered across this website but I did not find any compelling guide. 

Basically, what do I need to do? And what is the correct order of those things, and what does each step actually do? There a a lot of components which I do not know how to handle:

1) Windows IIS

2) Siemens Runtime Manager > Settings > Certificates

3) WinCC Unified Certificate Manager

4) WinCC Unified Configuration (additionally: should I use IP address or hostname within the dialog?)

5) Certificate Authority Download option button within WinCC Unified website. What to do with this thing?

6) TIA Poral > PLC Configuration > Certificate manager / Settings (here you can  create and assign additional certificates for some reason)

What is the correct order of things and how do I configure stuff to work properly.