Security Profile: Configuring PLCnext Store

Security icon

Activating further system services can compromise security

Before activating further system services, you must perform a risk and threat analysis of the system service and its impact on the security of the device and the application, taking into account the overall security context.

Activating the PLCnext Store in the system services

The PLCnext Store is deactivated by default. To activate PLCnext Store, proceed as follows: 

  • Log in to the WBM. 

Return to topicHow do I get to the WBM again? Click here for more information... 

Establishing a connection to the Web-based Management (WBM):

  • Open a web browser on your computer.
  • In the address field, enter the URL https://<IP-address-of-the-controller>/wbm,
    for example: https://192.168.1.10/wbm.

For further information, see WBM.

  • Open the System services page (System → System services) in the WBM. 
  • Activate the toggle switch of the PLCnext Store .
  • Click the SAVE PAGE & RESTART button. 

After a reboot, the PLCnext Store page is available.

Adding the firewall rules

For a successful connection, you must add the appropriate firewall rules.

Prerequisites: 

  • There must be an Ethernet connection to the Internet with a corresponding IP address in accordance with the security context (see Deriving IP addresses).
  • The device must be added to the PLCnext Store.

To add the firewall rules, proceed as follows:

  • Open the Firewall page (Security → Firewall). 
  • Open the IP OUTPUT RULES tab.
  • Provide the following information:
  • Click the SAVE & APPLY PAGE button.

Activating PLCnext Store on the PLCnext Store page

  • Open the PLCnext Store page (Configuration → PLCnext Store) in the WBM. 
  • In the General configuration area, click the CONNECT button (Connection to the PLCnext Store).
  • A PLCnext Store connection is automatically released after a configurable inactivity time period. Inactivity is defined as a no interaction took place, such as installing/uninstalling an app or transferring/retracting a license. By default, auto-disconnection is set to 60 min of inactivity. Other time periods (even "never") can be set. After a restart of the device the connection state persists, so the PLCnext Store connection is re-established if the set inactivity time period is not expired. Manually reconnecting is done by means of the connect button. 
    Use the Automatic disconnection drop-down menu to specify the time after which the PLCnext Store connection is automatically released.  

 

The PLCnext Store status should now look like this: 

 

If there are connection problems, go to the PLCnext Store and check that the device is correctly added and connected. You can find information on this in the PLCnext Store - Info Center.

 

 

• Published/reviewed: 2026-08-17 • Revision 024 •