Note
For simplicity, the examples in this document only use a single file for the --input parameter.
If your hardware configuration consists of multiple files or folders, you should specify all files.
For details, see Using Multiple Hardware Declaration Files
The PLC master password protects sensitive PLC configuration data like the certificate configuration. Setting up configuration data protection is a prerequisite for configuring other security settings like certififactes.
To set the PLC master secret, use the setup-secure-communication command.
As seen in the sample below, the PLC master secret is passed as "--password" option.
apax hwc setup-secure-communication --name "PLC_6" --input "src/Hwc/file.hwl.json" --password "Admin1234"
This command will create a <PLC Name>.SecurityConfiguration.json under the hwc.gen folder.
This file contains encrypted security data, which will be used for further security operations such as importing certificates into the project.
The file's content will look similar to the sample below:
{
"PKIData": "AAAAAAAAAAAAAAIAAACqAS0tLS0tQ----Rest of the sample content is cut here to prevent degradation of readability",
"CertificateAssignments": {}
}
WARNING
- The
setup-secure-communicationcommand will fail in case of having an existing security configuration file. - This prevents unintentionally overwriting imported certificates.
- The master password is only needed for the first download to a PLC.
- The master password will be ignored for further downloads (the parameter -M|--masterPassword can be omitted).
- In case you want to set a different PLC master password, you must delete the existing security configuration file before execution of the
setup-secure-communicationcommand. If the existing master secret was already downloaded to the PLC, it must be reset before a consecutive hardware download. You can delete the master password via the display of the PLC or using the hardware loader using the parameter--resetPlc:DeleteMasterPwd.