https://support.industry.siemens.com/cs/ww/en/view/109738241

FAQ06/2016HowtoRegenerateKeysandCertificatesRUGGEDCOMRX1000/RX1000P/RX1100/RX1100PHowtoRegenerateKeysandCertificatesEntry-ID:109738241,V1.
0,06/20162SiemensAGCopyright2016AllrightsreservedThisentryisfromtheSiemensIndustryOnlineSupport.
Thegeneraltermsofuse(http://www.
siemens.
com/terms_of_use)apply.
Securityinforma-tionSiemensprovidesproductsandsolutionswithindustrialsecurityfunctionsthatsupportthesecureoperationofplants,solutions,machines,equipmentand/ornetworks.
Theyareimportantcomponentsinaholisticindustrialsecurityconcept.
Withthisinmind,Siemens'productsandsolutionsundergocontinuousdevelopment.
Siemensrecommendsstronglythatyouregularlycheckforproductupdates.
ForthesecureoperationofSiemensproductsandsolutions,itisnecessarytotakesuitablepreventiveaction(e.
g.
cellprotectionconcept)andintegrateeachcomponentintoaholistic,state-of-the-artindustrialsecurityconcept.
Third-partyproductsthatmaybeinuseshouldalsobeconsidered.
Formoreinformationaboutindustrialsecurity,visithttp://www.
siemens.
com/industrialsecurity.
Tostayinformedaboutproductupdatesastheyoccur,signupforaproduct-specificnewsletter.
Formoreinformation,visithttp://support.
industry.
siemens.
com.
Tableofcontents1Overview.
31.
1RegeneratingKeysandCertificates.
32CustomerSupport43History.
41OverviewHowtoRegenerateKeysandCertificatesEntry-ID:109738241,V1.
0,06/20163SiemensAGCopyright2016Allrightsreserved1OverviewBydefault,RUGGEDCOMROXdevicesincludestaticcryptographickeysandcertificatesforSSHandSSL.
Thesecryptographickeysandcertificatesshouldbeupdatedregularlytoavoidsecurityrelatedissues.
Thisproceduredescribeshowtoremovetheexistingcertificatesandgeneratenewcertificates.
1.
1RegeneratingKeysandCertificatesToregeneratethekeysandcertificatesonthedevice,dothefollowing:1.
LogintothedeviceasrootviaanSSHorserialconsoleconnection.
Formoreinformationaboutloggingintothedevice,refertotheROXUserGuideforthedevice.
2.
DeletethecurrentHTTPSkeybythetypingthefollowingcommand,thenpressEnter:rm/etc/webmin/miniserv.
pem3.
GenerateanewHTTPSkeybytypingthefollowingcommand,thenpressEnter:/var/lib/dpkg/info/webmin.
postinstconfigureThefollowingmessagewillappear:md5sum:miniserv.
pem:NosuchfileordirectoryStartingwebmin:webmin4.
RestarttheWebserverbytypingthefollowingcommand,thenpressEnter:/etc/init.
d/webminrestartThefollowingmessagewillappear:Restartingwebmin:webmin5.
DeletethecurrentSSHkeybytypingthefollowingcommand,thenpressEnter:rm/etc/ssh/ssh_host_*_key*6.
GenerateanewSSHkeyandrestartSSHbytypingthefollowingcommand,thenpressEnter:ForROXv1.
13andnewer/var/lib/dpkg/info/openssh-server.
postinstconfigure.
ForROXv1.
12andolder/var/lib/dpkg/info/ssh.
postinstconfigure2CustomerSupportHowtoRegenerateKeysandCertificatesEntry-ID:109738241,V1.
0,06/20164SiemensAGCopyright2016Allrightsreserved2CustomerSupportCustomersupportisavailable24hours,7daysaweekforallSiemenscustomers.
Fortechnicalsupportorgeneralinformation,pleasecontactSiemensCustomersupportthroughanyoneofthefollowingmethods:OnlineVisithttp://www.
siemens.
com/automation/support-requesttosubmitaSupportRequest(SR)orcheckonthestatusofanexistingSR.
TelephoneCallalocalhotlinecentertosubmitaSupportRequest(SR).
Tolocatealocalhotlinecenter,visithttp://www.
automation.
siemens.
com/mcms/aspa-db/en/automation-technology/Pages/default.
aspx.
MobileAppInstalltheIndustryOnlineSupportappbySiemensAGonanyAndroid,AppleiOSorWindowsmobiledeviceandbeableto:AccessSiemens'extensivelibraryofsupportdocumentation,includingFAQs,manuals,andmuchmoreSubmitSRsorcheckonthestatusofanexistingSRFindandcontactalocalcontactpersonAskquestionsorshareknowledgewithfellowSiemenscustomersandthesupportcommunityviatheforum3HistoryTable3-1VersionDateModifications16/2016Initial