TcHmiSrv

A debugger is or will be attached to the extension

Subscription errors:

Configuration hints:

Automatic login The user account that is configured here is logged in automatically when a new session is opened.

Auto logoff Can be overridden for individual user accounts. This value is used when no other value is specified for the current user.

Require client certificate A client certificate is required to establish an HTTPS connection

Approved client certificates

Client certificates in this list can access the server. You can also link certificates to user groups and use them as an alternative login mechanism.


Add

Certificate

Select a file

PEM or PFX formatted SSL certificate. Changes will take effect after server restart.

Version	3
Subject	Hai, DE, TwinCAT HMI Server
Issuer	Hai_root, DE, TwinCAT HMI Server
Valid to	2029-05-07T02:24:42Z
Valid from	2026-05-07T08:24:42Z
Serial Number	E2A7519CF4CC04C5
Thumbprint	da4706ed7b999776edcb5b726e80f699db44ba7a92615e437829e5bde3183e5b
Signature Algorithm	RSA-SHA256

Self-signed root certificate

Select a file

PEM or PFX formatted certificate. This certificate is used to create self-signed server certificates.

Version	3
Subject	Hai_root, DE, TwinCAT HMI Server
Issuer	Hai_root, DE, TwinCAT HMI Server
Valid to	2029-05-07T02:24:42Z
Valid from	2026-05-07T08:24:42Z
Serial Number	80EF4CBD25FF9BDE
Thumbprint	4639d4fab2fa15bedd93f496748e43cec5cbfed82bfee971ae148ea2a3f16dac
Signature Algorithm	RSA-SHA256

Self-signed root certificate keyThe private key for the root certificate. For certificates in PFX format, this field can be left empty.

Select a file

KeyThe private key for the SSL certificate. For certificates in PFX format, this field can be left empty.

Select a file

Key passwordPassword used to decrypt the private key or PFX file. If the certificate does not require a password, this field can be empty.

Select a file

TempDHCustom parameters for the Diffie-Hellman (DH) key-exchange.

Select a file

Select user by If there are only a few user accounts, selecting the user account using a list box can simplify the login process.

Maximum number of connections Maximum number of concurrent connections.

Maximum connections per client Keep in mind that web browsers might open multiple simultaneous connections to the same server to achieve faster load times.

Flood protection Allowed WebSocket requests per client IP per second.

Flood protection HTTP Allowed HTTP requests per client IP per second per URI.

Flood protection subscription Allowed subscribe/unsubscribe requests per client IP per second

Default authentication extension Multiple authentication extensions can be used at the same time. The default authentication extension is automatically selected on the login page.

Admin remote access The __SystemAdministrator is allowed to log in from a remote endpoint. If disabled, the __SystemAdministrator can only log in from the local machine.

Show maintenance mode The login page can be used to enter the maintenance mode. If this setting is false /LoginMaintenance can be used instead. Requires a user in the __SystemMaintenanceUsers group.

SameSite attribute Specifies whether cookies should be sent for cross-page requests.

Allowed origins

Only clients whose origin matches at least one of these ECMAScript-compliant regular expressions are allowed to establish a connection. For example, the regular expression '^https?://(localhost|mydomain\.com)(:[0-9]+)?$' allows connections from 'http://localhost', 'https://localhost', 'http://mydomain.com' and 'https://mydomain.com' on all ports.
Can be set for specific remote configuration.


Add

Allow SSL certificates hosts origins Clients whose origin matches the Common Name (CN) or any Subject Alternative Name (SAN) of the server certificate are allowed to establish a connection
Can be set for specific remote configuration.

Loading diagnostics...