How to renew the self-signed server certificate information in EcoStruxure Machine SCADA Expert?

When the end user select the option "encrypted communications" in the project settings, the runtime will create a self-signed server certificate
By default, the server's certificate has a duration of 5 years, This duration can be adjusted by the customer. However after the duration period expired, the certificate should be renew.
In this article, we will show you how to proceed

This FAQ is application for EcoStruxure Machine SCADA Expert 2020, 2023 or newer and also for Vijeo XL

Here, all the step to re-news the certificate

1: Stop the runtime if it is running.

2: On EcoStruxure Machine SCADA Expert builder, select click on "Project", then "Communication"


3: Clicking on Self signed certificate information, will open others popup, showing the certificate details and the possibility to delete it, to create a new one

4: Click on the "Delete server certificate" button, a confirmation dialog will appear, click on Yes.

5: Now you can create your new certificate



For the above information, you should check your IT policy, The certificate duration can be extend until 20 years, the default setting is 5, but can be set from 1 year, to 20 years
Then, when this step is done, we can click on "ok" and restart the runtime. Start the runtime to allow the new self-signed certificate to be created.

Note: If you installed the old server's certificate on your client stations or you trusted on this old certificate at domain level, please consider you will need to do the same for the new self-signed certificate in case you want to avoid warnings about the certificate validity at starting a client connection. Making clients trust the certificate is not mandatory since everything will work as soon you acknowledge the warning messages, but doing so is recommended.

Publikováno pro: Schneider Electric Česká republika