PROFINET Forum

So the GSDX file prevents customers from using an unsigned/certified file in our device, but that doesn't prevent them from loading another GSDML file, right? Or should the signature of the GSDX file also be part of my product?

Webinar_Question wrote: ↑04 Mar 2024, 12:47 So the GSDX file prevents customers from using an unsigned/certified file in our device, but that doesn't prevent them from loading another GSDML file, right? Or should the signature of the GSDX file also be part of my product?

Yes, customers can continue to use GSDML files. However, they should be made aware that these files are potentially insecure. Future versions of e.g. TIAPortal could warn the user when importing a GSDML instead of a GSDX.

For devices that claim conformity with security class 1, the engineering tool will issue an error if the GSDML was not extracted from a GSDX. The signature of a GSDX file is embedded directly in the container.