Client Certificates - Mitsubishi Electric MELSEC iQ-F Series User Manual

Client Certificates

Manage client certificates in the Ethernet module that works as a client.
The current client certificates can be displayed and exported, and a CSR (certificate signature request) can be created.
Additionally, in the Ethernet module, a new client certificate (self-signed certificate) can be generated, and existing certificates
can be deleted and replaced.
The client certificate and corresponding private key are only stored in the Ethernet module. (They are not saved in a project
file.)
Item
Client certificate
information list
[Generate a New Client
Certificate] button
[Update] button
[Delete] button
Last Refreshed
[Get a CSR] button
[Replace] button
[Get a Certificate] button
8 APPLICABLE ENGINEERING TOOL
90
8.1 Certificate Configuration Tool for FX5-ENET
Description
Lists client certificate information included in the Ethernet module.
Double-click an item in the client certificate information list or select an item and press the  key to display the certificate details

in the standard Windows certificate dialog.
Displays the "Generate a New Client Certificate (Self-Signed Certificate)" window. (Page 91 "Generate a New Client Certificate
(Self-Signed Certificate)" window)
If a client certificate already exists on the Ethernet module, the new certificate overwrites it.
After the processing, client certificates are read from the Ethernet module and shown on the client certificate information list.
Reads client certificates from the Ethernet module and shows them on the client certificate information list.
Deletes a client certificate file existing on the Ethernet module from the Ethernet module.
If the certificate function has been stopped, the function restarts after the deletion.
After the processing, client certificates are read from the Ethernet module and shown on the client certificate information list.
Displays the last update date and time of the client certificate information list.
Reads the CSR (certificate signature request) of the client certificate from the Ethernet module and saves the CSR file in PEM
encoded format with the specified file name and location.
Replaces the current client certificate file existing on the Ethernet module. This function is mainly used to replace a self-signed
certificate generated inside the Ethernet module with a CA signed certificate received after certificate signature request.
• X.509 certificate files in DER or PEM encoding format are supported.
• Certificate files (extension: cer, der, pem, or crt) can be selected.
• If a client certificate already exists on the Ethernet module, the new certificate overwrites it and appears on the client certificate
information list.
• The maximum binary length of a supported certificate is 2048 bytes.
• The public key of an existing client certificate in the Ethernet module must be the same as that of the selected certificate.
• If the certificate function has been stopped, the function restarts after the replacement.
• After the processing, client certificates are read from the Ethernet module and shown on the client certificate information list.
Reads the CSR (certificate signature request) of the client certificate from the Ethernet unit and saves the X.509 certificate file in
DER encoded format with the specified file name and location.