Enable Encryption

Communications between Plant SCADA processes, computers and CtAPI can be encrypted in Plant SCADA.

To use encrypted communications, you need to have a System Management Server configured. In addition, the Runtime Manager should be running as a service on any computers hosting a server process (see Running the System as a Windows Service).

If these prerequisites are not met, warning messages will be displayed.

To enable encryption:

1. Launch the Configurator after the installation, or from the Windows™ Start menu.

2. In the left pane, select Plant SCADA | Encryption.

   

   The following page is displayed.

   

3. Firstly, check that the Encryption Prerequisites have been met. If a red cross appears next to an item, you will need to make the required configuration changes before you can enable encryption.

   • To register the computer with the System Management Server, see Connect a Computer to a System Management Server.

   • To configure Runtime Manager to run as a service, see Configure a Runtime Computer for Encryption.

4. Select Enable Encryption.

5. If you are performing an online upgrade of Plant SCADA or running an older version of Citect SCADA, select Accept encrypted and non-encrypted connections (mixed mode). Note that you can clear this option and configure your system to use encryption after the upgrade process is complete.

6. Click Configure. A message is displayed when encryption setup is completed.

The following table indicates the encryption mode that will align successfully across server and client.

Note: If you do not select Enable Encryption before you click Configure, the following message is displayed: "Encryption is currently disabled. It is recommended that you enable encryption".

See Also

Runtime System Security

Connect a Computer to a System Management Server