Results

Exchanging a certificate (optional)

In order to achieve comprehensive security, it is necessary to update the certificate "cacert.pem". The following manual steps are required for this purpose.

NOTE

Manage MyMachines and Manage MyMachines /Remote

On SINUMERIK devices with Integrate Clients, versions exists with expired QuoVadis intermediate certificate signatures. This certificate expired on November 06, 2022. Checking the validity of this certificate leads to an immediate connection abort or failure of onboarding in the SINUMERIK Integrate Client. This prevents remote access sessions from occurring.

Due to the expiry of the QuoVadis Global SSL ICA G3 certificate, the connection to the machine is terminated if the following SINUMERIK Integrate Client versions are involved:

  • 02.00.19 / 02.00.20 / 02.00.21

  • 03.00.19 / 03.00.20 / 03.00.21

  • 04.00.19 / 04.00.20 / 04.00.21

This only applies to the SINUMERIK ONE, SINUMERIK 840D sl, and SINUMERIK 828D Operate controls.

The SINUMERIK 840 D PL is not affected.

NOTE

SINUMERIK Integrate clients: previous versions

For previous versions, the certificate in the cacerts.pem file is still valid.
No update is required for these clients.

Please check the SINUMERIK Integrate Client version before performing a certificate update.

SINUMERIK Operate with SINUMERIK Integrate client under Linux

  1. Open the directory: card/addon/sinumerik/hmi/sinintclient/cfg

  2. Select "cacerts.pem".

    180542358667.png

  3. Use WinSCP, for example, to open "cacerts.pem" in the editor.

    108691562507.png

  4. Insert the content of "Customer Root CA" at the end of "cacerts.pem".

    108691186443.png

  5. Close the file to save the certificate.

  6. Perform a restart.

SINUMERIK Operate under Windows

  1. Open the "Customer Root CA" file in the editor and copy the entire content to the clipboard.

  2. Use WinSCP, for example, to open "cacerts.pem" in the editor.
    C:\ProgramData\Siemens\MotionControl\addon\sinumerik\hmi\sinintclient\cfg\cacerts.pem

    108692556939.png

  3. Insert the content of "Customer Root CA" at the end of "cacerts.pem".

    108692565771.png

  4. Close the file to save the certificate.

  5. Store the adapted file in the same directory again:
    C:\ProgramData\Siemens\MotionControl\addon\sinumerik\hmi\sinintclient\cfg

  6. Perform a restart.

Chap. 4.6.1