HEIDENHAIN TNC 620, Руководство пользователя

Страница: 467 / 521

HEROS functions |
OPC UA NC Server
(options 56 to 61)
PKI Admin
The
OPC UA NC Server
requires three different types of certificates.
The server and the client need two of them, the so-called application
instance certificates, in order to establish a secure connection. The
third certificate (user certificate) is required for authorization and for
starting a session with specific user permissions.
If at least one of the options 56 to 61 is active, then,
when booting for the first time, the control creates the
server certificate as part of a self-generated certificate
chain.
The client application or the manufacturer of the
application creates the client certificate.
The user certificate is linked to the user account. Please
contact your IT department.
The control automatically generates a two-level certificate chain
referred to as the
Chain of Trust
for the server. This certificate chain
consists of a self-signed root certificate (including a
revocation list
)
and a certificate for the server that is created on the basis of the root
certificate.
The client certificate must be added on the
Trusted
tab of the
PKI
Admin
function.
All other certificates should be added on the
Issuers
tab of the
PKI
Admin
function for verification of the entire certificate chain.
User certificate
The control uses the HEROS functions
Current User
or
UserAdmin
for administration of the user certificate. When you initiate a session,
the rights of the associated internal user are active.
To assign a user certificate to a user:
Open the
Current User
HEROS function
Select
SSH keys and certificates
Press the
Import certificate
soft key
The control opens a pop-up window.
Select the certificate
Select
Open
The control imports the certificate.
Press the
Use for OPC-UA
soft key
10
HEIDENHAIN | TNC 620 | User's Manual for Setup, Testing and Running NC Programs | 01/2022
467