Configure IEC-62351-3

The following steps assume we're decoding the communication of a TLS server with the address 192.168.1.26.
  1. Upload the TLS server’s private key to /data/cfg. The file name must match the server's address. In our case, the file must be named 192.168.1.26.key.
    Your key should be similar to the following:


  2. In Guardian's Features Control Panel, enable link events; this provides visibility to the TLS decoded handshakes; for example:


  3. Specify the key file's location by defining it in the CLI. To continue our example, we would use the following string:
    conf.user configure probe protocol iec104s tls private_key 192.168.1.26 /data/cfg/192.168.1.26.key
  4. Repeat these steps for each applicable TLS server key.
  5. Run the following command in a shell console:
    service n2osids stop