Secure by default: Configuring software updates

Firmware updates via WBM

Note:

  • Only users with the Admin or SecurityEngineer role have access to the Update page in the WBM.
  • Please note the information on updates in the main PLCnext Technology ‑ Info Center. 
  • Log in to the WBM. 

    Return to topicHow do I get to the WBM again? Click here for more information... 

    Establishing a connection to the Web-based Management (WBM2):

    • Open a web browser on your computer.
    • In the address field, enter the URL https://<IP-address-of-the-controller>/wbm,
      for example: https://192.168.1.10/wbm.

    For further information, see WBM2.

  • Open the Update page (Sytem → Update) in the WBM. 
  • Click the UPDATE button of the firmware you want to install on your PLCnext Control.

    ↪ The Update Firmware windows opens. 
  • Click the PREPARE AND STOP button.
  • When the PLCnext Control is prepared for update, deactivate the toggle switch Resume automatically after installation.
  • Click the SELECT FILE button and select the corresponding firmware file. 
  • Click the START UPDATE button.

    ↪ The software package is transferred and evaluated, the signature is checked. Then the PLCnext Control is rebooted. 


  • Carry out the firmware update again so that it is installed on both partitions.
    The respective partition is displayed during the update process:

 

If the signature does not match (i.e. an incorrect signature is stored) or the firmware does not match the signature, a corresponding message is displayed.

Software updates via Device and Update Management

Central software updates are possible via the Device and Update Management service. The Software Update via Device and Update Management service is activated by default. 

 For further information on Device and Update Management, refer to the topic Device and Update Managementin the main PLCnext Technology ‑ Info Center.

 

You must enable the port range to be able to communicate with the OPC UA® devices. To do this, proceed as follows:

  • Open the Firewall page (Security → Firewall) in the WBM. 
  • Open the BASIC CONFIGURATION tab. 
  • In the Basic rules section, select Continue from the drop-down list for OPC UA ports in the Action column. 
  • Click the SAFE & APPLY PAGE button.
  • Open the IP INPUT RULES tab. 
  • Add a new rule via the .
  • Provide the following information:
    • Select the interface.
    • Select the protocol.
    • Enter the IP address range. 
    • Enter the target port 4840.
    • Select the action Accept.
  • Click the SAFE & APPLY PAGE button.

 

 

• Published/reviewed: 2026-02-23 • Revision 021 •