Home
Security
Go beyond the norm in cybersecurity.
Security Features
Maintaining the control over production and the processes in the application has the highest priority in automation. Even measures to prevent security threats must not affect this.
Certificates
Windows Certificate Store
Multiplexing Proxy Certificates with Thumbprint

Version Information
Release Notes, Update information, Certifications and Frequently Asked Questions.
Concepts
Your first step into modern and powerful process visualization.
Deployment
Topics, you need to know, before using WinCC OA.
Security
Go beyond the norm in cybersecurity.
- Security Features
  Maintaining the control over production and the processes in the application has the highest priority in automation. Even measures to prevent security threats must not affect this.
  - Authorization Concept
  - Certificates
  - Login
  - Login Framework
    The WinCC OA login framework provides a framework that is easy to extend. The WinCC OA login panels can be easily replaced by user-specific panels without having to re-implement the functionality.
  - Server Side Authentication
  - User-defined Login
  - Authentication via Kerberos, basics
    In a more and more networking world, a WinCC OA system could be exposed to different types of attacks. An unauthorized WinCC OA system could connect to the distribution manager or hackers could try to manipulate WinCC OA messages.
- Multiplexing Proxy
  The WinCC OA Multiplexing Proxy Manager is used to increase the security of your WinCC OA projects.
- Continuous Monitoring
  The Continuous Monitoring feature of WinCC OA provides an interface for external tools to read and validate log and error messages of Security Events that were generated by the WinCC OA.
- Security Events in WinCC OA
- Further References
Engineering
Powerful tools for easy or complex engineering tasks.
Data Management
Classify, structure and archive your data.
Business Logic / Control
Endless possibilities in data processing for your projects.
Data Visualization
User interfaces, Trends and Reports for every purpose and device.
Southbound Interfaces
The process connection to the actual machines/sensors.
Northbound Interfaces
Your portal to the cloud or supervising systems.
Web Connectivity / Network Interfaces
Data exchange, APIs and web technologies
User Management
All about authorization, authentication and login-customization.
Availability
How to get your system uptime to the maximum.
Reporting
Create state of the art project reports without limits.
Addons
Useful tools and enhancements for special demands.
Reference Tables
Detailed and extensive content for special project adaptation.
Videos & Tutorials
Explore the capabilities of WinCC OA with our carefully selected collection of video tutorials and guides.
WinCC OA Documentation
Basic information about terms and functions within the documentation.
Disclaimer
A brief clarification of liability exclusions or legal notices.

Multiplexing Proxy Certificates with Thumbprint

If many certificates are used, it could happen that two certificates with the same name exist but the content is different in each case. To ensure that certificates are unique, thumbprint certificates should be used. These are always unique.

Certificates for Multiplexing Proxy can be used via Thumbprint as follows:

Figure 1. Windows Certificate Store - Thumbprint of an imported MxProxy Certificate

Config file for Single System Configuration:

The Proxy and the Server are deployed on the same host. The Client (on a separate host) communicates with the Server via the Proxy.

Figure 2. Server Config File - Use a Certificate via Thumbprint in the Config File

CAUTION:

Note that you can also use the MACHINE account for the winRootCA and winCert entries if you imported the certificates by using the machine account.

winCert = "MACHINE:MY:07 b6 90 ce 29 e4 a9 b3 1b 2e d3 a1 67 31 62 a9 6f d0 40 d6"

winRootCA = "MACHINE:ROOT:f1 8e 54 d5 52 56 58 be e1 9b a6 71 16 e0 9f 94 90 f7 d4 f7"

Figure 3. Client Config File - Use a Certificate via Thumbprint in the Config File