Configuration
4.8 OPC UA
SIMATIC CC712
56
Operating Instructions, 05/2019, C79000-G8976-C503-01
●
Security Policy
Select the required option in the table.
If you enable several options, then the client selects a suitable profile depending on the
settings on the gateway.
The gateway supports the following options of the SecurityPolicy:
–
None
–
Basic128Rsa15
Signing and 128-bit encryption
–
Basic256
Signing and 256-bit encryption
–
Basic256Sha256 (SecurityPolicy [B])
Signing and 256-bit encryption (SHA-256)
The supplementary Conformance Units (Signing / Encryption) mean:
–
Sign
The gateway only allows communication with signed frames.
–
Sign and encrypt
The gateway only allows communication with signed and encrypted frames.
Trusted clients
●
No certificate validation
With this option you disable the validation of the partner certificates.
When this option is enabled, the gateway generally permits communication even if the
criteria of the certificate validation listed below are not met or when the client certificate is
not included in the list of trusted clients.
When the option is disabled, the gateway validates the certificates of its partners, except
if "SecurityPolicy - None" is selected.
For information on the check mechanisms, refer to the "Certificate validation" section
below.
●
Import client certificate > Browse
You use this option to import the certificates of communication partners you trust.
Requirement for import of a certificate is that it is available in the PC file system.
Imported certificates are displayed in a table with their parameters.
