SSL/TLS certificate

Enables encrypted communication between FP0H C32ET\EP PLC and FTP client

Register an SSL/TLS certificate/secret key prepared by the user for the SSL/TLS communication of the FTP server function. Please note that the certificate is not transferred when the project is downloaded on the PLC or saved on an SD card.

When you do not register a certificate, the default self-signed certificate/secret key is used.

Enable the registration of an SSL/TLS certificate

  1. Set system register 1487 under System registers > Ethernet > FTP server to "Enable"

    Enter user name and password

  2. Set Encryption to SSL3/TLS1 (Explicit mode)

Register an SSL/TLS certifcate

  1. Online > Online mode
  2. Online > SSL/TLS certificate > Register
    • Extension: *.pem, *.cer, *.crt
    • File format: ASN.1 (Base64)
    • Size: max. 4096 bytes
  3. Select a private key file that corresponds to the certificate
    • Extension: *.pem, *.key
    • File format: ASN.1 (Base64)
    • Size: max. 4096 bytes
  4. Register

    The designated certificate/secret key is transferred to the PLC and an attempt is made to restart the FTP server. When the FTP server has successfully been restarted, the transferred certificate/secret key is used.

    If a client is connected to the FTP server, a message is displayed asking for confirmation that the server is to be restarted forcibly.

    Choose between two options:

    • Yes

      The connected client is forcibly disconnected and the FTP server is restarted. The transferred certificate/secret key is reflected instantaneously.

    • No

      The FTP server is not restarted and the SSL/TLS communication is performed by using the previous certificate/secret key before the transfer is attempted. The transferred certificate/secret key is reflected once the power supply has been restarted.

Delete an SSL/TLS certificate

  1. Online > SSL/TLS certificate > Delete

    To reflect the change, the FTP server has to be restarted. If a client is connected to the FTP server, a message is displayed asking for confirmation that the server is to be restarted forcibly.

    Choose between two options:

    • Yes

      The connected client is forcibly disconnected and the FTP server is restarted. The deleted certificate/secret key will no longer be available.

    • No

      The FTP server is not restarted and the SSL/TLS communication keeps using the certificate/secret key you have tried to delete. The deletion is reflected by rebooting the power supply.

Modified on: 2020-06-26Feedback on this pagePanasonic hotline