Turn an SSA project into a legacy project
How to turn a Server-Side Authentication (SSA) project into a legacy project and back again?
Fortunately, deactivating Server-Side Authentication (SSA) is pretty much straightforward. This can be achieved by using config entries in a Legacy project.
Please note that this is only a temporary workaround and should be switched back to a Server-Side Authentication project afterwards.
For instance, if you need to switch to OS authentication within the WinCC OA Administration, using the root account becomes essential since the user root is required in order to switch to the OS authentication.
- The following entries must be deactivated in order to create a legacy project
from an SSA project:
[general] #accessControlPlugin = "AccessControlPlugin" [ui] #httpServer = "https://WebServerHostnamet:443" [webClient] #clientSideAuth = 0
- If you use ULC UX, the following entry must be commented out since it is the
start option of -ssa!
[httpServer] uiArguments = "-p vision/login.pnl -centered -iconBar -menuBar -ssa"
-
After these changes, please make sure that -ssa is not used as a start option for UIs on the WinCC OA server and that the option -user is not used with a special user (user role for SSA) when you use SSA for Managers.
If you have implemented a user role other than root, also deactivate these config entries in the corresponding section before restarting the project.
[sectionName] #ssaCertificate = "file:FileName.crt" #ssaPrivateKey = "file:FileName.key" #ssaPrivateKey = "file:FileName.key"