Scenario 2: The Ca Resides Elsewhere - Siemens SR640XA User Manual

RUGGEDCOM
Application Note
7. Double-click the script 1_ssl_root_CA_certgen.vbs to generate the root certificate.
8. Double-click the script 02_ssl_device_certgen.vbs to generate a certificate for each device listed in
device_data.txt and have them signed by the Root CA. When the script asks if the certificates need to
be self-signed, click No.
9. Double-click the script 03_ssl_formatting.vbs to convert the certificates into PEM format and clean up
any files that were created by the scripts. The finished certificates are available in the SSL_certs folder and
named according to their associated device, as defined in device_data.txt.
10. Upload the created certificates to their respective devices. For more information about uploading the
certificates, refer to the User Guide for the device.
Section 4.2

Scenario 2: The CA Resides Elsewhere

In this scenario, it is assumed that a CA has already been established in the organization, which can be used to
accept certificate requests from the computer that hosts the scripts and signs the certificates for ROS and ROX
devices. In this case, the script will simply generate a key and a corresponding certificate request, which will
then have to be submitted to the CA for a certificate to be issued. Once the certificates have been issued, the
certificate files will have to be copied to the SSL_certs folder (where the keys and the original signing requests
are still present). Once the certificates are placed in the SSL_certs folder, a script needs to be executed to
convert the certificates into PEM format, which is compatible with ROS devices.
NOTE
For examples of PEM formatted certificates and keys, refer to
and Keys.
Scenario 2: The CA Resides Elsewhere
Using Scripts to Create SSL Certificates
Chapter 7, PEM Formatted Certificates
Chapter 4
9