Home
Videos & Tutorials
Cybersecurity Beyond the Norm
Certificates
Certificates serve as proof of identity and protect data communication in your WinCC OA project. Learn more about the ways to obtain certificates in the WinCC OA universe and why customization of default certificates is advisable.

Videos & Tutorials
- Things to know about WinCC OA
- Cybersecurity Beyond the Norm
  - Introduction
    Welcome to our SIMATIC WinCC OA Security series. In this series, we focus on the importance of security in SCADA systems, especially in light of the EU Cyber Resilience Act.
  - WinCC OA Security Guideline
    The Security Guideline ensures WinCC OA clients stay safe. Think of it as your personal GPS for using WinCC OA securely in a productive environment. Watch this episode to learn more!
  - Security Certification
    WinCC OA meets all required security standards for IEC 62443 certification. Regular external audits every three years reinforce this commitment. Discover how you will benefit from this proactive approach to security!
  - Security by Default
    WinCC OA comes with its built-in expert knowledge and Secure by Default configuration. This is a development principle ensuring that security measures are enabled right from the installation. This episode will provide guidance on working with this ready-to-use security template.
  - Certificates
    Certificates serve as proof of identity and protect data communication in your WinCC OA project. Learn more about the ways to obtain certificates in the WinCC OA universe and why customization of default certificates is advisable.
  - Password Policy
    WinCC OA offers two password policies. Learn about the differences between the WinCC OA Policy and the Active Directory Policy and some more benefits like MFA and SSO.
  - Safety
    Safety is an essential aspect of industrial automation systems. Key points include IEC 61508 certification, emphasizing risk assessment and Safety Integrity Levels (SILs). Understand the concept of a safety related system and safety-certified components like WinCC OA and the benefits of our WinCC OA Safety Manual.
  - Server Side Authentication
    Authentication ensures that only authorized individuals, services, and applications can access company resources. In WinCC OA, we have adopted Server Side Authentication (SSA) as the default authentication method since version 3.17. Discover the top three advantages of SSA by tuning in to this episode.
  - Defense in Depth
    A single protection measure is not sufficient to defend against today’s dynamic and evolving threats. That’s why we have adopted a Defense in Depth strategy which leverages multiple security layers to safeguard your WinCC OA projects. Think of it as a series of concentric circles, each reinforcing the other. This video will give you a concise overview of this approach.
  - Security Workshop
    Certified engineers seeking to master WinCC OA security methods can deepen their technical expertise on security topics by participating in our WinCC OA Security Workshop. Explore this video to uncover the details.

Certificates

Certificates serve as proof of identity and protect data communication in your WinCC OA project. Learn more about the ways to obtain certificates in the WinCC OA universe and why customization of default certificates is advisable.

Video Information

Length: 2:20
Language: English

Transcript

Hello and welcome to our series on WinCC OA Security. I am your host Mounir and in this video, we will explore the topic of certificates.

So, let’s go straight into it.

A certificate is a digital document that serves as proof of identity, whether for an individual, an organization, or, in our context, a computer.

A good example of a certificate is your passport. It's a tangible document that validates your identity with details like your name, your signature, expiry date, and even a thumbprint.

You need to be aware that certificates have a limited validity period. This is because, in the dynamic landscape of cybersecurity, it's essential to refresh your digital signatures regularly, just as you would renew your passport and change your passwords regularly.

In the WinCC OA universe, there are two ways to obtain a certificate. You can either create your self-signed certificate by using the WinCC OA panels or acquire one from a trusted third-party. Every digital certificate includes a public key, in order to enable asynchronous encryption which is a standard method to protect data communications in your project.

In WinCC OA we provide certificates by default, which are easy to work with and will help you to set up your environment quickly. But please bear in mind that default certificates are the same for everyone and are not intended to be used in productive plants or environments. It's advisable to customize these default certificates for a secure, encrypted connection to your project.

I hope that this episode will help enlighten you about the importance of using valid and customized certificates.

Of course, there is more in-depth information available for you on our WinCC OA portal and at the WinCC OA Website.

Thank you for watching and don't forget to follow us on LinkedIn or YouTube. Bye, and see you in the next video!