Checking project integrity 

Integrity check

Libraries and projects in PLCnext Engineer are hashed. The hashes assigned with PLCnext Engineer are checked by PLCnext Control. This way you can verify that data is not modified, tampered with, or corrupted.  

When creating the project in PLCnext Engineer, a manifest file with hashes is generated. Before the project is loaded on the PLCnext Control, it is checked whether this project has integrity. This integrity check writes a notification. 

To configure the integrity check, proceed as follows: 

  • Log in to the WBM. 

Return to topicHow do I get to the WBM again? Click here for more information... 

Establishing a connection to the Web-based Management (WBM):

  • Open a web browser on your computer.
  • In the address field, enter the URL https://<IP-address-of-the-controller>/wbm,
    for example: https://192.168.1.10/wbm.

For further information, see WBM.

 

  • Open the Project integrity page (Security → Project integrity). 
  • Make the following settings:
  • Click the SAVE & APPLY PAGE button.

After downloading a project to the PLCnext Control you have to make sure that the integrity check of the project data was successful. To do this, you need to check the notifications. Proceed as follows:

  • Log in to the WBM. 

Return to topicHow do I get to the WBM again? Click here for more information... 

Establishing a connection to the Web-based Management (WBM):

  • Open a web browser on your computer.
  • In the address field, enter the URL https://<IP-address-of-the-controller>/wbm,
    for example: https://192.168.1.10/wbm.

For further information, see WBM.

 

  • Open the Notifications page (Diagnostics → Notifications). 
  • Check if you can see a notification stating that the integrity check was successful for your project. See the example screenshot below.

Further steps of the check follow, which you must check for completeness:

  • The project is loaded onto the controller.
  • The project name of the project is displayed. Check if the project name matches the project you wanted to load on the controller.
  • PLCnext Control started. 

 

The project integrity check detects various errors and displays them in the notifications. The following entries are possible: 

  • "Manifest file does not exist"
  • "Hash algorithm not supported"
  • "Hash value of the file is not correct"
  • "File does not belong to the project"
  • "File does not exist"

 

All devices have the same default configuration, which depends on the Security Profile:

  • With activated Security Profile: Error
    PLCnext Control does not go to the RUN status, but to the FAIL status (Ready (error)). 
     For more information about the status, see the corresponding documentation, e. g. User manual AXC F 2152.
  • Without activated Security Profile: Warning
    A warning is displayed, but PLCnext Control starts and the program runs.

Signature check

Signature

  • Generate a signing certificate via an official PKI or create a self-signed certificate. 
  • Save the signing certificate as *.pfx with a password. 
  • Log in to the WBM. 

Return to topicHow do I get to the WBM again? Click here for more information... 

Establishing a connection to the Web-based Management (WBM):

  • Open a web browser on your computer.
  • In the address field, enter the URL https://<IP-address-of-the-controller>/wbm,
    for example: https://192.168.1.10/wbm.

For further information, see WBM.

 

  • Open the Project integrity page (Security → Project integrity). 
  • Make the following settings:
  • Click the SAVE & APPLY PAGE button. 
  • Open PLCnext Engineer. 
  • Double-click the controller node in the PLANT area. 
  • Open the Package Signing editor. 
  • Enter the certificate path of your generated signing certificate and the corresponding password.

    The password is only saved temporarily. Each time you close and reopen the project, you must enter the password again. 
Note: If you insert or change a signature, a project change must also take place so that the signature change/addition is registered.
  • Download the project to your PLCnext Control.

Signature with time stamp

...to be continued...

 

 

 

• Published/reviewed: 2025-06-27 • Revision 018 •