FORUM CTRLX AUTOMATION
ctrlX World Partner Apps for ctrlX AUTOMATION
10-17-2024 11:37 AM
Hi all,
I am in the last steps of finishing a first version of our Apache IoTDB App for CltrX. Currently working on tying up some loose ends. One of them being that I want to enable HTTPS for our app.
For this we could install a self-signed certificate, which would make things a bit more difficult for our users.
Alternatively we could install a real certificate, however this would expire, rendering the application useless. On normal systems I'd say that's ok, but knowing that quite often in the automation-world systems stay in operation untouched a lot longer than an IT guy feels comfortable with, I guess that's not an option.
Yet another option would be something like Let'sEncrypt, but I really hope there are no PLCs out there that are allowed to be actively reached from the internet.
One last option would be to use a certificate provided to the application and I know the CtrlX settings allow managing these certificates.
Do you have any pointers on how to provide such external certificates to apps?
10-18-2024 08:14 AM
Did you already check the official SDK documentation Certificate Management (optional)?
Beware that the is a fair chance that controls could be connected directly to the internet, but normally there would be some kind of VPN tunneling the communication. Also the ctrlX OS itself is even being security certified, see FAQ for ctrlX CORE.