Opc Ua Security Mechanisms On Bis U-6127 - Balluff BIS U-6127-081-1 4-06-ST36 Betriebsanleitung

BIS U-6127-081-1_4-06-ST36
Processor unit
9
OPC UA (continued)
9.2 OPC UA security mechanisms on BIS U-6127
On the BIS U-6127, the basic OPC UA security settings
are selected in the web server. Under S
(see Security settings on page 40) it is possible for the
logged-in user to change the security settings.
Fig. 9-2: Web server security settings
In the web server tab OPC UA (see figure Fig. 9-2), there
are the following security settings:
– R u c c
efuSe nSecuRe lient onnectionS
activated, unsecure OPC UA connections are rejected.
The secure state is thus activated.
– a t c
ccept only RuSted lient
be operated separately by the user. It is always
activated synchronously with the R
field.
connectionS
– u S e (uses the integrated security
Se ecuRe lement
module): A dedicated security module is used in the
BIS U-6127 device. The public and private security
keys for generating and authenticating certificates are
stored on this.
www.balluff.com
ecuRity SettingS
: If this field is
c : This field cannot
eRtificateS
eject unSecuRe client
The fields R u c
efuSe nSecuRe lient
t c c
only RuSted lient eRtificateS
of two basic states for OPC UA.
1. Unsecure (default): All OPC-UA connections are
allowed.
2. Secure: Only the following security settings are allowed
in the OPC UA client:
– Security policy: B
256S
aSic
– Message security mode: S
See also Fig. 9-5 on page 135.
If any of the three security settings are changed, the device
must be restarted for the changes to take effect.
c and a
onnectionS ccept
are linked and allow a total
256
ha
&
ign encRypt
english 133