Secure Ouc Between Two S7-1500 Cpus - Siemens SIMATIC S7-1500 Function Manual

Additional information
You can find more information about the system data types TCON_QDN_SEC in the STEP 7
online help.
For additional information on secure communication, refer to the section Secure
Communication (Page 34).
6.11.3

Secure OUC between two S7-1500 CPUs

The following section describes how you can set Secure Open User Communication via TCP
between two S7-1500 CPUs. In the process one S7-1500 CPU acts as TLS client (active
establishing of the connection) and the other S7-1500 CPU as TLS server (passive
establishing of the connection).
Setting up a secure TCP connection between two S7-1500 CPUs
For secure TCP communication between two S7-1500 CPUs you need to create a data
block with the TCON_IP_V4_SEC system data type yourself in every CPU, assign
parameters and call it directly at one of the instructions TSEND_C, TRCV_C or TCON.
Requirements:
● Current date and time are set in the CPU.
● Both S7-1500 CPUs have at least firmware version V2.0
● TLS client and TLS server have all the required certificates.
Figure 6-18
Communication
Function Manual, 11/2019, A5E03735815-AH
Certificate handling for Secure OUC between two S7-1500 CPUs
Open User Communication
6.11 Secure Open User Communication
97