Skip to main content

Protecting the Communication between the WebVisu and the Browser

Note

The web server in the CODESYS Control for <device> SL runtime system now uses TLS Version 1.3 by default instead of Version 1.2.

You can protect the connection between the web server of the PLC and the visualization client from unauthorized access with the following measures:

Configuring a certificate-encrypted connection between the web server and a visualization client

If necessary, you can generate the certificate required for encryption (SSL/TSL) on the Security Screen of the Devices tab. To request a CA-signed certificate, you have the option of generating a CSR (Certificate Signing Request) and storing it on your computer. You will also be notified that it is recommended to work with a CSR instead of using a self-signed certificate for the web server.

For instructions on creating the certificate and configuring the HTTPS connection, see the corresponding section on the following help page: Using an encrypted HTTPS connection

Extending the configuration of the web server in the RTS

You can extend the configuration of the web server in the CODESYS Control for <device> SL runtime system so that additional HTTP Security headers are generated for enabling additional security functions.

For instructions, see the corresponding section on the following help page: Enabling the web browser with a HTTP Security header