Balluff BIS U-6127-081-1 4-06-ST36 Betriebsanleitung Seite 259

BIS U-6127-081-1_4-06-ST36
Processor unit
7
Startup and operation (continued)
Importing a key into the device to sign tag data
To securely store the key in the Secure Element of the BIS
U-6127, the following are required:
– a private key
– a key update ticket (a long character combination),
which can be purchased from Balluff
– Internet access for the PC
Each key update ticket can only be used once.
For each device and for each change of a key,
a new key update ticket is required, which can
be obtained from Balluff Sales.
1. Download the current context file of the device to the
PC by clicking on the d
ownload
the device web page Configuration / Security / Secure
Element.
This step does not yet require an Internet
connection, but it does require administrator
privileges.
Fig. 7-31: Secure Element context file
2. Save file (with the .WibuCmRaC file extension) to the
PC.
3. Optional: Disconnect the device.
4. Connect to the Internet.
5. Using a browser (e.g. Google Chrome), navigate to the
web page that was communicated together with the
ticket from Balluff and make sure that there is a secure
connection (in Google Chrome, this is indicated by the
symbol of a closed padlock).
6. Enter the ticket code.
Each ticket can only be used for one update
process.
7. After the prompt to upload the context file of the
device, select the previously saved file and transfer it to
the website.
www.balluff.com
c f button on
ontext ile
8. After being prompted to enter the private key (Secret
Data), enter the 32 bytes of data in hexadecimal
notation and verify before confirming.
Accepted characters are 0...9 and A...F or a...f.
The Elliptic Curve key is only 28 bytes long. To
get to 32 bytes, a total of four zero bytes
(i.e. eight 0 characters) must be inserted at the
end.
Example
pem file:
priv:
d4:79:60:0b:2a:15:02:5c:48:34:d7:
a8:7d:c0:c5:c0:c3:73:8b:f8:33:38:
aa:bd:4b:d5:d7:a2
Key to be entered:
d479600b2a15025c4834d7a87dc0c5c0
c3738bf83338aabd4bd5d7a200000000
A total of exactly 64 characters must be
entered (the clipboard of the computer can
also be used for this purpose).
9. Download an update file (with the .WibuCmRaU file
extension) for the device from the website to the PC
and save it.
10. Reconnect the PC to the BIS U-6127 device (the
Internet connection is no longer needed).
11. Log in with a user ID that has administrator rights for
the device.
12. Upload the received file (with the .WibuCmRaU file
extension) to the device on the Configuration / Security
/ Secure Element page: First select the file and then
click u u f .
pload pdate ile
Fig. 7-32: Secure Element update file
The file can only be successfully loaded on the
same device from which the WibuCmRaC file
was previously saved.
⇒ A status message confirms a successful import.
13. Perform a device restart.
english 83