Manually Installing an Edge Application Certificate file for SCADAPack 47xi

This article provides steps to successfully load and apply an Edge Application certificate generated using the SDK when the certificate cannot be loaded through the Remote Connect Edge Application Certificate feature.

Overview

This article outlines the steps required to:

• Enable FTP and SSH services on a SCADAPack device using Remote Connect.
• Upload and install a certificate on the SCADAPack Edge processor.
• Restart services and verify the certificate installation.

Prerequisites

• • Remote Connect access to SCADAPack
  • FTP client (e.g., FileZilla)
  • SSH client (e.g., PuTTY)
  • Certificate file
  • SCADAPack root login credentials

Step 1: Enable Services

Ensure that the following services are enabled on the SCADAPack device via Remote Connect (please take note of settings before proceeding):

• • FTP Server
  • SSH Server

Step 2: Rename the Certificate you want to load.

1. Rename the certificate file to integrator.crt

Step 3: Upload the Certificate via FTP

1. Open your FTP client (e.g., FileZilla).
2. Connect to the SCADAPack device.
3. Navigate to the following directory:.

/mnt/sec_data/rauc/certs/

Upload the integrator.crt file to this location.

Step 4: Connect to the Device via SSH

1. Launch PuTTY (or any SSH client).
2. Connect to the device using the USB interface with the following IP address, 10.2.3.4

• Log in using:
  • Username: root
  • Password: (configured password)
• Step 5: Load and Apply the Certificate

After logging in via SSH, run the following commands:

• Reload system daemons

systemctl daemon-reload

• Restart RAUC service

sudo /bin/systemctl restart rauc

Step 6: Validate Certificate Installation

To verify that the certificate has been successfully installed, run:

ls -la /mnt/sec_data/rauc/certs; cat /mnt/sec_data/rauc/certs/integrator.crt

Expected Outcome

• The file integrator.crt should appear in the directory listing.
• The certificate contents should be displayed in the terminal.

After executing these commands, the output should resemble the expected results as shown in the reference screenshot.

Step 7: Return IP Communication Services to Previous State

After installing the Edge Application Certificate file, please return the SCADAPack FTP Server status and SSH Server status to their previous settings.

Conclusion

Following these steps ensures that:

• FTP and SSH services are properly enabled.
• The certificate is successfully uploaded to the SCADAPack device.
• Required services are restarted to apply changes.

Released for: Schneider Electric Egypt and North East Africa