I am trying to use a custom certificate instead of the vendor one to identify/connect to the AXC F 2152.
I created a self signed root certificate and signed a certificate destined for the AXC. I then created a new identity in the WBM (Security - Certificate Authentication (plcnext.help)) and added the private key, the corresponding certificate, and the root certificate.
In PLCnext Engineer I added the root certificate in the Trust Stores section of the options (as Admin) and unchecked all other certificates.
Now if I want to connect to the plc a dialog shows that the device wants to connect with the vendor certificate. I get similar results if I use openssl s_client -showcerts ....
So how do I get the AXC to use the custom certificate instead of the vendor one?
Hello phoffmann,
you would have to change the identityStore used for the RSC Communication.
Usually this is IDevID which is a signed Unique Certificate stored in the TPM of youre Device.
If you REALY want to use your own certificates here is how to change that:
/etc/plcnext/device/System/RscGateway/RscGateway.settings:
Keep in mind that at that points multiple PLCs may recieve the same Identity which might make identifying the correct PLC via the Engineer harder.!
best regards,
Oliver