HEIDENHAIN TNC 620 User Manual page 467

HEROS functions | OPC UA NC Server (options 56 to 61)
PKI Admin
The OPC UA NC Server requires three different types of certificates.
The server and the client need two of them, the so-called application
instance certificates, in order to establish a secure connection. The
third certificate (user certificate) is required for authorization and for
starting a session with specific user permissions.
If at least one of the options 56 to 61 is active, then,
when booting for the first time, the control creates the
server certificate as part of a self-generated certificate
chain.
The client application or the manufacturer of the
application creates the client certificate.
The user certificate is linked to the user account. Please
contact your IT department.
The control automatically generates a two-level certificate chain
referred to as the Chain of Trust for the server. This certificate chain
consists of a self-signed root certificate (including a revocation list)
and a certificate for the server that is created on the basis of the root
certificate.
The client certificate must be added on the Trusted tab of the PKI
Admin function.
All other certificates should be added on the Issuers tab of the PKI
Admin function for verification of the entire certificate chain.
User certificate
The control uses the HEROS functions Current User or UserAdmin
for administration of the user certificate. When you initiate a session,
the rights of the associated internal user are active.
To assign a user certificate to a user:
Open the Current User HEROS function
Select SSH keys and certificates
Press the Import certificate soft key
The control opens a pop-up window.
Select the certificate
Select Open
The control imports the certificate.
Press the Use for OPC-UA soft key
HEIDENHAIN | TNC 620 | User's Manual for Setup, Testing and Running NC Programs | 01/2022
10
467