Balluff BIS U-6127-081-1 4-06-ST36 Betriebsanleitung Seite 217

BIS U-6127-081-1_4-06-ST36
Processor unit
7
Startup and operation (continued)
OPC/UA
Fig. 7-19: OPC/UA
OPC/UA settings:
–
R u c c
efuSe nSecuRe lient onnectionS
reject unsecure connections.
– With a t c
ccept only RuSted
connections with authorized certificate will be allowed
and the system is thus protected against unauthorized
connection to the OPC/UA server. This setting is
coupled with the setting R
c (a).
onnectionS
– u S e (c) uses the built-in hardware
Se ecuRe lement
element to store the secret keys, which further
increases security.
www.balluff.com
(a) can be used to
c (b) only
lient eRtificateS
u c
efuSe nSecuRe lient
Certificate list:
The certificate list shows the available certificates on the
device. In addition, the certificate details such as status,
organization and validity period of the certificate are
displayed. The status of the certificate indicates whether
the certificate is trusted or rejected by the authorized user
or administrator.
With permission, the list can be changed using
admin
buttons (d) and (e). A certificate that is already marked as
trusted can be set to the rejected state by clicking the lock
icon or deleted from the device by pressing the trash can
icon. Similarly, a rejected certificate can be set to the
trusted state or deleted from the device.
Generate/download certificate:
– Use c c (f) to create a certificate for the
Reate eRtificate
device itself (e.g. after changing the network settings).
– With d (g), a certificate can be downloaded.
ownload
To avoid invalid certificates, set the date, time
and time zone correctly when generating a
certificate.
Certificates have a limited validity (typically
several years, the validity can be displayed on a
Windows PC, for example) and must be
replaced when the validity expires.
For more information on Data security, see OPC UA in
chapter 3.6 on page 11.
english 41