Access control:No communication after switch to TIA19

Hello Denilson,

We have been using TIA 17 with the 'traditional' access control. We use this for secure communication between the HMI (WinCC comfort panels V2) and the PLC (1517F). 

Now we are switching to TIA 19 with WinCC Unified panels. After I downloaded the new PLC (1517F FW3.1) and the nice new Unified panels, there is no communication (even not when I disable access control).

Only when I activate the Legacy and fill in the passwords like normal, than it works normally.

However, I guess the plan is to step away from the old legacy stuff and use the newer access control philosophy. But what passwords and where do we need to configure this? 

Is there a manual available?

With Kind regards,

Colin van den Mosselaar

------------------------------------------------------------------------------------------
Split from TIP: STEP 7 V19 - Access control for S7-1500 FW3.1.

Well, I also thought it would be fully certificate based. However, I checked it just now on the HMI panel and I see there are no certificates. I guess TIA did not provide one to the HMI panel during the download. 

I have my certificate settings set to "Use certificates provided by certificate management during runtime". But I guess that did not provide a cert to the HMI...

Mosselaar

Well, I also thought it would be fully certificate based. However, I checked it just now on the HMI panel and I see there are no certificates. I guess TIA did not provide one to the HMI panel during the download. 

I have my certificate settings set to "Use certificates provided by certificate management during runtime". But I guess that did not provide a cert to the HMI...

 Is the date and time set to the same on the HMI and on the PLC? 

Hello Hati,

Yes, the times do match. 

I am now trying to manually install a the communication certificate onto the HMI screen.

1. On the PLC, export the certificate to USB

2. USB in HMI

3. Import certificates

4. But here is already a problem. It states that there is no certificate on my USB... (but is really there).

So how should the certificate be transferred? 

Hi Mosselaar,
I'm facing the same issue, do you mind sharing how you solved it?
Thanks!

UPDATE: I reached out to the Siemens support team, and they replied back with the following: "the user and role management function is only possible for access to the CPU and is not yet implemented on the HMI side. If you want to use secured access from CPU to HMI, you can only achieve this via legacy access control. This has already been forwarded to the relevant product management for future versions/updates."

(Note: I'm on TIA Portal Version 19 Update 1)

Mosselaar

Hello Hati,

Yes, the times do match. 

I am now trying to manually install a the communication certificate onto the HMI screen.

1. On the PLC, export the certificate to USB

2. USB in HMI

3. Import certificates

4. But here is already a problem. It states that there is no certificate on my USB... (but is really there).

So how should the certificate be transferred?