Webinar_Question wrote: ↑18 Dec 2024, 15:33 Is a special smart card reader necessary?

PI recommends certain hardware for compatibility. However, there is no hard requirement.

Webinar_Question wrote: ↑18 Dec 2024, 15:32 Is it possible for a vendor to have several smart cards? This could be use between different departments creating different PN devices.

Yes, multiple smart cards can be used.

Webinar_Question wrote: ↑18 Dec 2024, 15:31 Will the private key for the vendor signing certificate be generated directly on the smartcard?

Yes, the private key will be generated and stored on the smartcard.

Can signing certificates (and thus it's signed GSDX files) be revoked? On our webserver, we maintain and publish a Certificate Revocation List (CRL). During the signing process, the GSDX file is provided with a timestamp and if a certificate is not on this revocation list at the time of signing, th...

Is it necessary to re-sign the GSDX every three years when the sining certificate expires? No. This is possible because signed GSDX files include all the necessary information, such as timestamps and validation data, that prove the certificate was valid when it was originally used to sign the docum...

Am I required to provide a new GSDX package when certifying a PROFINET device? Providing a GSDX package is mandatory for devices classified as Security Class 1 or higher. If your device falls under this classification, submitting a signed GSDX package is required as part of the certification process.

Webinar_Question wrote: ↑18 Dec 2024, 15:30 What are the specifications and requirements for the IT to handle the smart cards?

PI provides comprehensive documentation and guidance along with the smart card. In summary, it is essential to keep the smart card secure to ensure that only authorized personnel can access and use it.

If a supplier requests the signature card and it is physically delivered as a package - how can it be ensured that the supplier certificate has not been used maliciously beforehand without being noticed? The smartcard is locked and secured with a transport PIN (16 digits). We deliver the transport ...

Whose name will be there on the certificate that is issued for signing? PNIO or Vendor's name? Thank you! The certificate is exclusively created for the vendor and contains the vendors data. In the oder process (both options) you are asked for the following vendor data which will become part of you...

The cost for 1st option (device vendor gets certificate, vendor does the GSD singing) is mentioned 900 Euro. Does that include cost of smart card and all the tools from PI that are required to sign the GSD? The Cost for 2nd option (GSD signing service of the PNO) , the cost mentioned is 900 Euro an...

What all tests are performed when vendor submit GSDML to PI for signing ? I know one that is GSD checker. Any other tests are performed before and after signing GSD? The signing tool does not perform any semantic tests and does not replace the gsd checker. We recommend checking the GSDML file with ...