Siemens SIMOCODE pro Function Manual page 84

Communication
2.2 PROFINET communication
Supported OPC UA services of the SIMOCODE pro V PN (GP) OPC UA server
SIMOCODE pro V PN (GP) supports the following OPC UA services:
● SecurityPolicy:
– None
– Basic128Rsa15
● MessageSecurityMode:
– None
– Sign&Encrypt.
Explanation of security settings:
The following table shows the security functions supported by the
SIMOCODE pro V PN (GP) OPC UA server, which have to be set in the connection
configuration of the OPC UA client:
Table 2- 30
Security Policy
None
Basic128Rsa152
1) Exchange of certificates is deactivated
2) The data packets are signed and encrypted with the certificates.
Note
When using the MessageSecurityMode "SignAndEncrypt", the connection timeout effective
in the OPC UA Client must be set to at least 15 s.
Unsecured connection between the client and the server possible!
Use the setting "none" for test purposes only.
During productive operation, use the following settings for secure communication between
the client and server:
• Security Policy: Basic128Rsa15
• Message Security Mode: SignAndEncrypt.
Note
Requirement for certificate exchange in SIMOCODE pro V PN (GP)
The precondition for certificate exchange in SIMOCODE pro V PN is the presence of a valid
time (see Section "Time-of-day synchronization by the NTP procedure" below).
84
Security functions that have to be set in the connection configuration of the OPC UA
client
1)
DANGER
MessageSecurityMode
None
SignAndEncrypt
2)
SIMOCODE pro - Communication
Function Manual, 11/2018, A5E40508495002A/RS-AC/003