Siemens SIMATIC ET 200AL, System Manual

Page: 1468 / 2255

OPC UA communication
9.4 Using the S7-1500 CPU as an OPC UA client
Communication
Function Manual, 05/2021, A5E03735815-AJ
347
9.4.9.3 User authentication
In the OPC UA client interface of the S7-1500, you can set what authentication is required for
a user of the OPC UA client wishing to access the server. To do so, you must select the
corresponding client interface in the project tree of the requested S7-1500 CPU under "OPC
UA communication > Client interfaces" and select the type of user authentication in the
Inspector window under "Properties > Configuration > Security".
Types of user authentication
The following options are available for user authentication:
•
Guest
The user does not need to verify authorization (anonymous access). The CPU creates an
anonymous session for the user, and the OPC UA server does not check the authorization
of the client user.
• User name and password
The user must prove authorization (no anonymous access). The OPC UA server checks
whether the client user is authorized to access the server. Authorization is given by the
user name and the correct password. These inputs cannot be checked by the client
interface, which means all values are accepted as being valid.
Note
STEP 7 stores user name and password unencrypted in the data block/instance data block.
Recommendation: Use the user authentication "User (TIA Portal - Security Settings)".
• Users (TIA Portal - Security Settings)
You can enter a user name from the list of users entered in the project for authentication.
The names of the registered users for the current project are available in the user
administration in the project tree under "Security Settings > Users and roles". There you
can also enter additional users.
You can also enter a name that is not listed in the user administration of the project or
leave the field blank. This is necessary when the corresponding user name is only provided
by a different source during runtime, for example, via HMI or from a different OPC UA
client.