Assigning Secure Passwords - Siemens SIMATIC S7-1500 System Manual

Industrial cybersecurity
4.9 Secure operation of CPUs
4.9.2.2

Assigning secure passwords

Using non-secure passwords can easily lead to data misuse. Non-secure passwords can be
easily guessed or decrypted.
• Therefore, always change the default passwords during commissioning and use different
passwords for different functions and devices.
• When changing the password, do not use old passwords (or portions thereof) that were
used in the past.
• Also, change passwords for functions you don't personally use to prevent misuse of such
unused functions.
• Always keep your passwords confidential and ensure that only authorized individuals have
access to the respective passwords.
• Exceed the required minimum password length and use a combination of lowercase
letters, uppercase letters, numbers and special characters.
You can find information on assigning secure passwords in the STEP 7 online help (TIA
Portal).
Overview of all components and functions with password protection
Components and functions with password
protection
SIMATIC S7 app
CPU
OPC UA
SNMP Community-String (similar to a pass-
word)
Secure communication (with certificate pro-
tection)
Web server
38
Comment
See the section SIMATIC S7 app (Page 100)
See the Communication Function Manual
(https://support.industry.siemens.com/cs/ww/en/view/59192925), section
Secure Communication
See the Communication Function Manual
(https://support.industry.siemens.com/cs/ww/en/view/59192925), section
OPC UA Communication
See the Communication Function Manual
(https://support.industry.siemens.com/cs/ww/en/view/59192925), section
SNMP
See the Communication Function Manual
(https://support.industry.siemens.com/cs/ww/en/view/59192925), section
Secure Communication
See the Web Server Function Manual
(https://support.industry.siemens.com/cs/ww/en/view/59193560)
SIMATIC Drive Controller
System Manual, 11/2023, A5E46600094-AD