Configuring with the WBM
7.3 The menu items of the WBM
SIMATIC RF650R/RF680R/RF685R
82
Configuration Manual, 03/2018, C79000-G8976-C386-06
Security settings
In the "Security settings" area you can make security settings for the OPC UA certificates.
Table 7- 20 Description of the parameters
Parameter
Description
Security profile
Specification of the security profile and the access options for the UA server of
the reader
•
None
No security profile is used.
•
Basic 128
This profile corresponds to the security profile "Basic 128" of the OPC UA
specification. The reader uses signing and if configured 128-bit encryption.
•
Basic 256
This profile corresponds to the security profile "Basic 256" of the OPC UA
specification. The reader uses signing and if configured 256-bit encryption.
•
Basic 256 / SHA 256
This profile corresponds to the security profile "Basic 256 / SHA 256" of the
OPC UA specification. The reader uses signing and if configured 256-bit
encryption using the hash algorithm SHA-256.
Security method
Specifies the security method of the server
•
Sign or sign and encrypt
Depending on the settings on the communications partner (client), the
reader selects the method with the highest possible security.
•
Sign
The reader only allows communication with signed frames.
•
Sign and encrypt
The reader only allows communication with signed and encrypted frames.
Allow anonymous
access
If the check box is selected, the reader allows anonymous users access to the
data of its OPC UA server.
Anonymous users do not need to give a user name/password when establish-
ing a connection. If anonymous access is not allowed, an OPC UA client or a
user must provide a valid user name/password combination of a user with
OPC UA rights. A user with OPC UA rights can be created via the WBM. The
user profile preinstalled in the factory (user name: "admin", password "admin")
also has OPC UA rights.
Generate OPC UA
server certificate
Button for creating an OPC UA server certificate.
Among other things the server certificate serves to identify the OPC UA server
to the OPC UA client.
The OPC UA server certificate contains the application name, the security
profile and the IP address of the reader. If any part of this information is
changed, the server certificate needs to be recreated.
Note: Note that the procedure can take several minutes.