How To: Protect communication to the WebVisu
Note
The web server in the CODESYS Control for <device> SL runtime system now uses TLS Version 1.3 by default instead of Version 1.2.
You can protect the connection between the web server of the PLC and the visualization client of the WebVisu from unauthorized access with the following measures:
Configuring a certificate-encrypted connection between the web server and a visualization client
If necessary, you can generate the certificate required for encryption (SSL/TSL) on the Security Screen of the Devices tab. To request a CA-signed certificate, you have the option of generating a CSR (Certificate Signing Request) and storing it on your computer. You will also be notified that it is recommended to work with a CSR instead of using a self-signed certificate for the web server.
For more information, see the following: the section "Using an encrypted HTTPS connection" on the Run as WebVisu page.
It describes step by step how to set up the certificate and the HTTPS connection.
Extending the configuration of the web server in the RTS
You can extend the configuration of the web server in the CODESYS Control for <device> SL runtime system so that additional HTTP Security headers are generated for enabling additional security functions.
For instructions, see the corresponding section on the following help page: Enabling the web browser with a HTTP Security header