Siemens SIMATIC S7-1500 Function Manual page 188

9. Click the "General" tab in the properties of the CPU that is acting as server.
10. Click "OPC UA > Server > Security > Secure Channel".
11. Scroll down in the "Secure Channel" dialog to the section "Trusted clients".
12. Double-click in the table on the empty row with "<add new>". A browse button is
displayed in the row.
13. Click this button.
14. Select the client certificate that you have imported.
15. Click the button with the green check mark.
16. Compile the project.
17. Load the configuration onto the S7-1500 CPU.
Result:
The server now trusts the client. If the server certificate is also considered trusted, the server
and client can establish a secure connection.
Accepting client certificates automatically
When you select the option "Automatically accept all client certificates during runtime" (below
the "Trusted clients" list), the server automatically accepts all client certificates.
NOTICE
Setting after commissioning
In order to avoid security risks, deactivate the "Automatically accept client certificates
during runtime" option again after commissioning.
Communication
Function Manual, 11/2019, A5E03735815-AH
OPC UA communication
9.3 Using the S7-1500 as an OPC UA server
187