Index | Prev | Next

OPC UA server tasks

Setting up an OPC UA server involves configuring properties, adding server points with alarm and history extensions, and configuring OPC UA client users.

OPC UA server, client user authorization
Starting with Niagara Niagara 4.14.u1 and Niagara 4.15, the OpcUaServer component provides access to specific aspects of the OPC UA Server based on user roles and permissions as they are configured in the User Service, Role Service and Category Service. These server-side settings are observed when granting access to specific aspects of the OPC UA Server and include more restrictive access for Anonymous users.
Setting up the OPC UA server
Setting up an OPC UA server follows a standard framework procedure.
Configuring OPC UA Server Security Modes
Starting with Niagara 4.14 to secure data, you need to configure the Security Mode and the Server Security Certificate used by the server to sign and encrypt communication messages. You must select the Server Security Certificate from the Niagara Key Store.
Configuring the server to support an OPC UA client user
OPC UA clients require you to configure an authentication scheme. This scheme assures that the identity of each user can be verified. It may use roles to limit user access to only certain areas. The scheme authenticates the user when he or she enters a username and password, which are already configured for the user.
Setting up certificate based authentication
Certificate-based authentication is a technique that allows one machine to securely identify itself to another across a network connection, using a certificate called a public-key certificate.
OpcUaServer alarm processing
When started, the OPC UA server automatically adds to the station's AlarmService OpcUaServerAlarmClass and OpcUaServerAlarmRecipient components (if they do not already exist).
Adding a server point with alarm and history extensions
Server points provide live and historical data as well as alarm events. Server points are visible to connected OPC UA clients.
Verifying server setup using client simulation software
This procedure uses the ProSys OPC UA Client software to verify the OPC UA server setup. Several other OPC UA clients are available. The procedure remains basically the same for all clients.
Generating an OPC UA server certificate
The topic explains how to generate a server certificate using the added URI field in the certificate to establish a secure server connection from the client to the server.
Generate an OPC UA server certificate for Third-Party Clients
The topic describes how to generate a server certificate using scripts by running the appropriate commands in the command prompt or Git Bash to establish a secure server connection from the client to the server. To ensure compatibility with OpcUaClient implementation, automatically uses a certificate for signing purposes with the keyCertSign usage while generating the certificate.

Index | Prev | Next