Rockwell Automation 1756-HIST2G FactoryTalk Historian ME 2.2 - Manual (Page 175)

9 • M ANAGING S ECURITY
165
the network. It is recommended that you use a system that is always up and
running to avoid possible failure at login.
The secondary server must have the same configuration as the FactoryTalk
Directory server, including the FactoryTalk Services Platform CPR 9 SR2, IIS,
and web services.
5. If you selected the HTTPS protocol, select Yes or No to verify certificate
parameters. If you select Yes, use the drop-down menus to set certificate
parameters.
6. When you have finished making changes to the security settings, click [Save].
Selecting Certificate Parameters
When using the HTTPS protocol, you must upload the proper Certificate Authority
(CA) files. Before you save Certificate Parameters, go to the Advanced tab and
upload the certificate files on the Upload Management page. Select the appropriate
certificate or security file type from the File Type drop-down menu.
Set related certificate parameters as follows:
„
Verify Certificate Issuer
‡
Select No if you do not want to specify a CA.
‡
Select Yes if you want to specify a CA, and then complete the rest of the
parameter fields.
„
CA Certificate - the certificate of authority. This is necessary for secure HTTP.
„
Sever Certificate - this file is a digital certificate that has been issued to a server
and contains information about the server.
„
Private Key - private key for the web server.
„
Password - encryption code for SSL. Enter a password whether you are using a
CA or not.
See the “FactoryTalk Security Prerequisites” section for additional configuration
information.
If you use HTTPS, do not delete the CA Certificate, Server Certificate, or Private Key
files after uploading them.