Siemens 6GK1411-1AC00, Руководство по эксплуатации

Страница: 73 / 150

Configuration
4.8 OPC UA
SIMATIC CC7
Operating Instructions, 10/2019, C79000-G8976-C503-02
73
Certificate validation
The UA server of the gateway checks the certificates of its communication partners when the
"No certificate validation" option is disabled, except if "SecurityPolicy - None" is configured.
If a partner certificate is invalid or is not trustworthy, communication is aborted.
Communication is aborted in the following cases:
● The IP address of the communications partner is not identical to the IP address in its
certificate.
● The use stored in the certificate (OPC UA client/server) differs from the function (OPC UA
client/server) of the communications partner.
● The current time on the gateway is outside the period of validity of the partner certificate.
Requirements for connection setup
The following requirements must be met to set up a connection regardless of the certificate
validation:
● The application URI sent by the requesting client must match the URI of the server
application of the gateway.
● If the partner certificate is not trustworthy, the gateway must at least have stored a self-
signed certificate of the partner.
● At least one authentication option is enabled (see below).
The gateway does not support partner certificates that were issued by multiple CAs
(certificate chains).
4.8.3 Authentication
Authentication
You use the two options to set the access authorization of the communication partners
(clients) to the OPC UA data of the gateway. Activate one of the two options.
● Enable anonymous access
Clients can access the OPC UA data without authentication.
● Authentication via user name and password
Clients can access the OPC UA data only with authentication.
● Add user
With enabled "Authentication via user name and password" option, you use this button to
open the input boxes for a new user.
● User name
User name of the communication partner
● Password
Password of the communication partner
The user data must be configured for the respective client.