The Software Loader (sld) supports the creation of a portable package (zip file) that can be transferred to a computer without an internet connection and without Apax installed. In general an internet connection is required for the SIMATIC AX license check and the validation of the Apax package.
The portable package can be used on a computer within a production facility or in a pipeline without external dependencies.
Note
- Without an internet connection, the tool cannot perform the SIMATIC AX license check or validate the component files for malicious modifications itself.
Therefore, you are responsible for protecting these files against tampering, just like any other application on your production system.
The tool supports you with secure hash standard means such as providing a SHA256 hash for the zip file, so you can verify the file after transferring it to the target computer.
More recommendations can be found on the Siemens website for Industrial Cybersecurity.
-
The portable package is subject to an additional OEM-license, which you will find in the file
OEM-License SIMATIC AX. Read the license carefully. You have to accept the license with the option--accept-license-agreementwhen creating the portable package. -
The name of the computer and its IP address is stored in the portable package.
WARNING
When using a portable package of the Software Loader, SIMATIC AX cannot directly notify nor update the package in case of vulnerabilities in dependent code, unlike with Apax.
SIMATIC AX will release new versions of the Software Loader in case of vulnerabilities. It is your responsibility to regularly check the changelog for updates, especially those addressing vulnerability fixes. If a new release includes such fixes, you should update the portable package and distribute it to your customers.
Siemens cannot be held responsible for issues caused by unresolved vulnerabilities in a portable package.
Note
This command is only available for users with the license COCREATION.