12/13/2017 1:21 PM | |
Posts: 12 Rating: (0) |
Hi, I'm trying to setup secure connection to email server with CP 1243-1. I've read and done everything as said in example (Sending Emails over Secure Email Connections with S7-1500 and S7-1200) that can be found on forum. I've succesfully managed to send mails via port 25, but am unable to send via port 587 or 465. When I try to send via port 465 or 587 it returns status word 8420, which says in TIA help that "Server certificate string could not be verified with CP root certificate." To send mail, I'm using Tmail_C instruction with Tmail_v4_SEC data type to define parameters for sending a mail.
I've tried to send mail using various mail servers and their certificates, but in the end I always get same status word. Did someone have similar problem to this, and how can it problem be solved? Best regards, DIeHard P.S. My settings are in attachment. |
Last edited by: DieHard at: 12/13/2017 2:19:15 PM |
|
12/14/2017 12:23 PM | |
Posts: 12 Rating: (0) |
Hello Pittiplatsch, the cert. ID is indeed 13, and is certificate for server authentication used by mail provider. I've double checked it, and it can be seen in hierarchy view of certificates that it leads to root certificate authority of company whose cert. mail server is using. Date and time on cpu are 100% correct, and in adittion to that, time on CP is synchronized with the time on PLC. I've imported all certificates that can be found in certificate hierarchy both in certificate manager in global settings and in CP certificate manager. The CP I'm using is 1243 - 1 v.3.0. I've also tried to use CP directly to send e-mails via its data point/messages, and yet i get the same status word 8420. I don't really get why cant server certificate be verified with CP root certificate when both are visibe in TIA. Best regards, DieHard P.S. Pictures of these settings are in attachemnt AttachmentOther settings.zip (120 Downloads) |
12/14/2017 1:35 PM | |
Joined: 12/9/2009 Last visit: 4/18/2024 Posts: 156 Rating: (11) |
Hello, you have to import the certificate under in the certificate manger as "Trusted certificate s and root certification authorities". You must assign the certificate in the certificate manager of the CP. Adapt the e-mail parameters. The sender address must correspond to the account of the e-mail server and the certificate-ID. Here you can find an application sample https://support.industry.siemens.com/cs/ww/en/view/46817803 |
12/14/2017 1:46 PM | |
Posts: 12 Rating: (0) |
Hello little holmes, I've set my whole application according to that example, and already did what you said I should, and yet it still returns status word 8420. Best regards, DieHard AttachmentCP 1243-1 Send Mail.zip (119 Downloads) |
12/14/2017 2:05 PM | |
Posts: 531 Rating: (34) |
Global Security Settings for the Manager are not enabled. It seems that not the certificates, but the setting for the cert manager is misconfigurated. |
Follow us on