Table of Contents
Advertisement
Installing and setting up PCU Base for IPC
10.6 Remote access for diagnostics
Setting up remote access with SSH and key pair
The procedure for setting up users and using remote access is the same as the usual procedure
for remote access with SSH.
Table 10-22 Support with setting up remote access
Task
Generate key pair
Set up infrastructure on devices
Access devices via remote con‐
nection
10.6.6
Encryption via SSH protocol
Security
The security of SSH is ensured by a series of cryptographic algorithms for encryption and
authentication.
Authentication
The server identifies itself to the client with an RSA, DSA or ECDSA certificate, which enables
detection of manipulation in the network (no other server can identify itself as a known server).
The client can authenticate itself either by public key authentication with a private key whose
public key is stored on the server, or with a normal password. While in the latter case, user
interaction is always necessary (unless the password is stored unencrypted on the client
computer), public key authentication allows client computers to log on to SSH servers without
user interaction, without a password having to be stored in plain text on the client. However, for
added security the private SSH keys can also be protected with a password.
276
Recommended application
PuTTY Key Generator
Supplied script ssh_key_log‐
in.bat
PuTTY
Storage path
C:\Program Files (x86)\PuTTY
\puttygen.exe
C:\ProgramData\Siemens\Mo‐
tion Control\siemens
\etc.\ssh_key_login.bat
C:\Program Files (x86)\PuTTY
\putty.exe
Commissioning Manual, 02/2020, A5E47437618B AB
Help
Online help in PuTTY
(Chapter
Public key for pasting into au‐
thorized_keys file )
Call up the script via the prompt. To do
this, enter user name and file name of
the public key as the parameters.
Syntax:
ssh_key_login.bat <user
name> <public key>
Example:
ssh_key_login.bat username
publicKey.pub
Online help in PuTTY
IP address (factory setting):
●
System network: 192.168.214.241
●
Company network: The IP ad‐
dress is taken from the DHCP serv‐
er
MCU commissioning: NC, PLC, Drive
Advertisement
Table of Contents
