Connecting to an OPC UA server

The next step is to connect to the OPC UA server and add an OpcUaDevice to the network.
Prerequisites:
  • You are working in Workbench running on a PC or laptop computer.
  • Your OPC UA device is on the network and ready to connect.
  • Prosys OPC UA Simulation Server is installed on the PC.
  1. Open the OPC UA server software and navigate to the Status tab.
    The software opens.
    Image

    The example server software above is the ProSys Simulation Server. However, it is more likely that you will open a connection to your OPC UA server using software known to you that serves-up actual historical and live data.

  2. Locate the Connection Address and copy it along with the required security mode and user authentication method.
    In the example above, this address is:opc.tcp://IE67DTDVYXXC2.global.ds.honeywell.com:53530/OPCUA/SimulationServer

    Within Niagara the default configuration for the OPC UA server and client connections is security mode Sign and SignEncrypt and security policy Basic256SHA256. These are the recommended settings for high security. A warning accompanies the other security policies and modes that the driver supports. You or an administrator must acknowledge this alert to proceed. The driver logs the acknowledgment in the system for audit purposes.

  3. In the Workbench Nav tree, expand the Config > Drivers and double-click the OpcUaNetwork.
    The Opc Ua Client Device Manager opens.
  4. To add a new device, click New.
    The New window opens.
    Image
  5. Select the OpcUaDevice from the drop-down list and click OK.
    A second New window opens.
    Image
  6. Configure at least these properties and click OK.
    • Server Endpoint Url is the Connection Address you copied earlier.
    • Security Mode, by default, is set to Sign Ecript Basic256 Sha256. This value must match the server’s Security Mode configuration. The default Security Mode for both OPC UA server and device is Sign Ecrypt Basic256 Sha256, which enables signing and encryption with security policy EncryptBasic256SHA256.
    • Certificate defaults to the self-signed tridium certificate. For higher security, use a signed client certificate that matches the root CA certificate in the station’s Trust Store.
  7. To configure the User Authentication Mode, open the device’s AX Property Sheet by right-clicking on OpcUaDevice followed by clicking View > AX Property Sheet.
    The Property Sheet opens.
    Image
  8. Select the User Authentication Mode from the drop-down list and click Save.
    For User Authentication Mode, select the option the server requires. For example, the Prosys Simulation Server is configured for Anonymous user, as shown. If you select the option User Name And Password, you must enter the credentials required by the server.
  9. To confirm that the network connected successfully to the server, review the Server State indicates Running and the Server Current Time, Server Start Time, and Server Info properties.
    The system should have populated these properties with current values.