Secure Ouc Between Two S7-1500 Cpus - Siemens SIMATIC ET 200AL System Manual

Communications services
3.6 Secure Communication
Additional information
You can find more information about the system data types TCON_QDN_SEC in the STEP 7
online help.
For additional information on secure communication, refer to the section Secure
Communication (Page 40).
3.6.3.3

Secure OUC between two S7-1500 CPUs

The following section describes how you can set Secure Open User Communication via TCP
between two S7-1500 CPUs. In the process one S7-1500 CPU acts as TLS client (active
establishing of the connection) and the other S7-1500 CPU as TLS server (passive establishing
of the connection).
Setting up a secure TCP connection between two S7-1500 CPUs
For secure TCP communication between two S7-1500 CPUs you need to create a data block
with the TCON_IP_V4_SEC system data type yourself in every CPU, assign parameters and call
it directly at one of the instructions TSEND_C, TRCV_C or TCON.
Requirements:
• Current date and time are set in the CPU.
• Both S7-1500 CPUs have at least firmware version V2.0
• TLS client and TLS server have all the required certificates.
Figure 3-24
78
Certificate handling for Secure OUC between two S7-1500 CPUs
Function Manual, 05/2021, A5E03735815-AJ
Communication