Siemens SIMATIC ET 200AL, System Manual

Page: 1351 / 2255

OPC UA communication
9.3 Using the S7-1500 as an OPC UA server
Communication
230
Function Manual, 05/2021, A5E03735815-AJ
9. Click the "General" tab in the properties of the CPU that is acting as server.
10. Click "OPC UA > Server > Security > Secure Channel".
11. Scroll down in the "Secure Channel" dialog to the section "Trusted clients".
12. Double-click in the table on the empty row with "<add new>". A browse button is displayed
in the row.
13. Click this button.
14. Select the client certificate that you have imported.
15. Click the button with the green check mark.
16. Compile the project.
17. Load the configuration onto the S7-1500 CPU.
Result :
The server now trusts the client. If the server certificate is also considered trusted, the server
and client can establish a secure connection.
Accepting client certificates automatically
When you select the option "Automatically accept all client certificates during runtime"
(below the "Trusted clients" list), the server automatically accepts all client certificates.
NOTICE
Setting after commissioning
In order to avoid security risks, deactivate the "Automatically accept client certificates during
runtime" option again after commissioning.