beckhoff · TwinCAT 3 TE1000 · 100 pp.

Beckhoff TwinCAT 3 Software Protection (TE1000) Manual PDF

Read online

Related manuals

Contents

Document text

Table of contents

Table of contents Table of contents 1 Foreword.................................................................................................................................................... 5 1.1 Notes on the documentation ............................................................................................................. 5 1.2 For your safety .................................................................................................................................. 6 1.3 Notes on information security............................................................................................................

7 2 Introduction ............................................................................................................................................... 8 2.1 General system requirements ........................................................................................................... 8 2.2 The three pillars of software access protection................................................................................. 9 2.3 User database as a central switching point.......................................................................................

9 2.4 Software protection configurator ..................................................................................................... 11 3 Quick start ............................................................................................................................................... 13 3.1 Control of access to the PLC source code...................................................................................... 13 3.2 OEM licenses: protection against unauthorized use of software functions ..................................... 14 4 TwinCAT OEM certificates .....................................................................................................................

19 4.1 Creating the "OEM Certificate Request File"................................................................................... 22 4.2 Determining the file fingerprint of the OEM certificate file ............................................................... 27 4.3 Requesting the OEM certificate ...................................................................................................... 28 4.4 Installing the OEM certificate .......................................................................................................... 30 4.5 Extending an OEM certificate..........................................................................................................

31 4.6 Updating an existing OEM certificate? ............................................................................................ 31 5 User databases (user DBs) .................................................................................................................... 33 5.1 Creating a user database ............................................................................................................... 33 5.2 Setting default settings for the user database in Visual Studio ....................................................... 38 5.3 Select the current user database in Visual Studio ..........................................................................

39 5.4 Default user in the user database ................................................................................................... 41 5.5 Extensions for user databases........................................................................................................ 41 5.5.1 Associated elements in the Software Protection configuration console........................... 43 5.5.2 Creating extensions and users in TwinCAT 3 Engineering.............................................. 44 5.6 Expanding the user database .........................................................................................................

49 5.6.1 Adding/changing database administrators....................................................................... 49 5.6.2 Separating the database administrator and developer functions..................................... 53 5.6.3 Adding users to a group................................................................................................... 54 5.6.4 Defining your own group access rights ............................................................................ 56 5.7 Linking the user database to a project ...........................................................................................

69 5.8 Assigning user access rights in the project ..................................................................................... 70 5.9 Distribution / exchange of user databases ...................................................................................... 72 6 Logging in and selecting a user account.............................................................................................. 73 6.1 Build 4022 ....................................................................................................................................... 73 7 Setting up basic protection of PLC application software....................................................................

75 7.1 Encryption ....................................................................................................................................... 75 7.1.1 PLC source code encryption............................................................................................ 76 7.1.2 Project file encryption....................................................................................................... 76 7.1.3 Encrypting the boot project .............................................................................................. 77 7.1.4 Displaying the object protection status............................................................................. 78 TE1000 3 Version:

1.17.8

Page 3

Table of contents

Table of contents 7.1.5 Display of the current encryption version......................................................................... 79 7.2 Signing files (protection against unauthorized changes) ................................................................ 80 7.3 Displaying the overview of the software protection settings of the PLC project.............................. 80 8 Issuing and using your own OEM licenses .......................................................................................... 83 8.1 Creating OEM application licenses .................................................................................................

84 8.1.1 Preparing TwinCAT 3 Engineering................................................................................... 86 8.1.2 Creating a license description file for an OEM application license................................... 86 8.1.3 Creating License Request Files for an OEM application license ..................................... 89 8.1.4 Creating License Response Files for an OEM application license................................... 90 8.2 Storing OEM application licenses on a dongle................................................................................ 92 8.1.5 Importing License Response Files for an OEM application license .................................

92 8.3 Querying the OEM application license in a PLC application ........................................................... 92 8.4 Providing OEM PLC libraries with license protection ...................................................................... 96 9 Protecting an application against cloning............................................................................................ 97 10 Support and Service ............................................................................................................................... 98 TE1000 4 Version: 1.17.8

Page 4

1.1 Notes on the documentation

Foreword | Notes on the documentation 1 Foreword | Foreword 1.1 Notes on the documentation | Notes on the documentation This description is intended exclusively for trained specialists in control and automation technology who are familiar with the applicable national standards. The documentation and the following notes and explanations must be complied with when installing and commissioning the components. The trained specialists must always use the current valid documentation. The trained specialists must ensure that the application and use of the products described is in line with all safety requirements, including all relevant laws, regulations, guidelines, and standards.

Disclaimer The documentation has been compiled with care. The products described are, however, constantly under development. We reserve the right to revise and change the documentation at any time and without notice. Claims to modify products that have already been supplied may not be made on the basis of the data, diagrams, and descriptions in this documentation. Trademarks Beckhoff ® , ATRO ® , EtherCAT ® , EtherCAT G ® , EtherCAT G10 ® , EtherCAT P ® , MX-System ® , Safety over EtherCAT ® , TC/BSD ® , TwinCAT ® , TwinCAT/BSD ® , TwinSAFE ® , XFC ® , XPlanar ® and XTS ® are registered and licensed trademarks of Beckhoff Automation GmbH.

If third parties make use of the designations or trademarks contained in this publication for their own purposes, this could infringe upon the rights of the owners of the said designations. EtherCAT ® is a registered trademark and patented technology, licensed by Beckhoff Automation GmbH, Germany. Copyright © Beckhoff Automation GmbH & Co. KG, Germany. The distribution and reproduction of this document, as well as the use and communication of its contents without express authorization, are prohibited. Offenders will be held liable for the payment of damages. All rights reserved in the event that a patent, utility model, or design are registered.

Third-party trademarks Trademarks of third parties may be used in this documentation. You can find the trademark notices here: https://www.beckhoff.com/trademarks . TE1000 5 Version: 1.17.8

Page 5

1.2 For your safety

Foreword | For your safety 1.2 For your safety | For your safety Safety regulations Read the following explanations for your safety. Always observe and follow product-specific safety instructions, which you may find at the appropriate places in this document. Exclusion of liability All the components are supplied in particular hardware and software configurations which are appropriate for the application. Modifications to hardware or software configurations other than those described in the documentation are not permitted, and nullify the liability of Beckhoff Automation GmbH & Co. KG.

Personnel qualification This description is only intended for trained specialists in control, automation, and drive technology who are familiar with the applicable national standards. Signal words The signal words used in the documentation are classified below. In order to prevent injury and damage to persons and property, read and follow the safety and warning notices. Personal injury warnings Hazard with high risk of death or serious injury. DANGER Hazard with medium risk of death or serious injury. WARNING There is a low-risk hazard that could result in medium or minor injury. CAUTION Warning of damage to property or environment NOTICE The environment, equipment, or data may be damaged.

Information on handling the product This information includes, for example: recommendations for action, assistance or further information on the product. TE1000 6 Version: 1.17.8

Page 6