Make TLS client settings

Enable the TLS client function and make the communication settings.

The TLS client uses either the public key authentication method or the client authentication method to connect to a TLS server. The TLS client provides a TCP server (non-TLS server) that listens to a port. Any TCP client (e.g. Modbus, MEWTOCOL) can connect to this TCP server and request data from the TLS client.

Use TLS client: Use this toggle switch to enable the TLS client function.
First control register: Specify the start address of the control registers used in the PLC to trigger an action.
Last control register: This address is calculated based on the specified control register.
PLC polling time: Set the interval in seconds to poll the PLC's control registers.
Listening port (non-TLS server): Set the listening port of the unsecured TCP server.
Permitted IP addresses: Select an option to restrict access to external devices:
- Local host only: Only the device itself is allowed to connect (e.g. using the script function or the local host address IP 127.0.0.1).
- Single IP address: Only a device with the specified IP address is allowed to connect.
- IP address range: Only devices with IP addresses in the specified range are allowed to connect.
IP address or host name of TLS server: Enter the IP address or host name of the TLS server.
TLS server port: Set the port number of the TLS server.
Authentication method:
- Public key: The client can send data without certificate.
- Client certificate: The client needs a certificate to send data.
Minimum TLS version: Set the minimum TLS version number that is supported.
Use CA verification:
Usually official certificates must be signed by a certificate authority (CA). If you use a local broker, turn the toggle switch off (no CA verification is requested).

If official certificates are used, turn the toggle switch on. To upload a certificate from the PC to the FP-I4C unit, drag a file onto the drag and drop area or select a file with the + icon and then select the cloud icon. You can upload all three certificates at the same time.

The following certificates are supported:
- CA certificate of the certificate authority (.crt, .csr, .der, .cer, .pem)
- Client certificate (.crt, .csr, .der, .pem)
- Key file (.key, .pem)
The file name must be ca.xxx, client.xxx, or key.xxx (e.g. ca.crt, client.crt, or key.pem).
Save your configuration.
If you have changed any settings, a Save button appears in the top right corner of the screen. You can make changes in multiple pages and then save your settings.

To reset all settings on the current page to the default configuration, select the Reset button at the bottom of the page.