Siemens SINUMERIK 840D Installation Manual

Also see for SINUMERIK 828D Turning: Diagnostic manual Function manual Equipment manual Programming manual Operating manual

Contents

Prepare yourself against DoS (Denial of Service) attacks, for example, by setting upappropriate firewall rules, implementing an IPS (Intrusion Prevention System) and/or a WAF(Web Application Firewall).Protect your system against code injection by applying state-of-the-art technologies and theappropriate knowledge.Store certificates securely so they cannot be exported by unauthorized entities. In such cases,you must follow the hardening guidelines when setting up.These are just a few examples of how you can make your system more secure. It is your taskand you are responsible for configuring the hardened system.TLS implementationThe system is prepared for use of the TLS 1.2 protocol. All modules and services mustcommunicate via encrypted channels that meet the current security requirements.Consequently, the system is prepared to use the TLS 1.2 protocol. The server requires a digitalcertificate that confirms the identity of the server. You can purchase these items from CAs(Certificate Authorities). The certificate must be digitally signed. The clients must trust thesecertificates. If you use your own generated self-signed certificate, then the root certificates mustbe deployed on the controls on both Linux and Windows machines - and they must also bedeployed on SSL proxies if they are being used. You are completely responsibility for correctlyimplementing and checking your system.If you are using an obsolete client (such as a Windows NT machine) that does not support therequired TLS protocols, then you should use a hardware proxy to resolve this problem. Suchhardware can provide an additional encryption layer for the communication channel.You must also ensure that the hardware proxy is appropriate and correctly encrypted. Thehardware proxy is not part of the product.Finally, you must also have the knowledge and the experience to configure the IIS server. Youmust always be prepared to address the actual hardening requirements. You are responsiblefor making the correct system security settings in the client environment.Installing/configuring Windows services3.6 Setting up encrypted communicationManage MyResources, Optimize MyProgramming /NX-Cam Editor70 Installation Manual, 12/2019, A5E44672080B AE