Siemens SIMATIC RF650R Configuration Manual page 82

Configuring with the WBM
7.3 The menu items of the WBM
Security settings
In the "Security settings" area you can make security settings for the OPC UA certificates.
Table 7- 20
Parameter
Security profile
Security method
Allow anonymous
access
Generate OPC UA
server certificate
82
Description of the parameters
Description
Specification of the security profile and the access options for the UA server of
the reader
None
•
No security profile is used.
Basic 128
•
This profile corresponds to the security profile "Basic 128" of the OPC UA
specification. The reader uses signing and if configured 128-bit encryption.
Basic 256
•
This profile corresponds to the security profile "Basic 256" of the OPC UA
specification. The reader uses signing and if configured 256-bit encryption.
Basic 256 / SHA 256
•
This profile corresponds to the security profile "Basic 256 / SHA 256" of the
OPC UA specification. The reader uses signing and if configured 256-bit
encryption using the hash algorithm SHA-256.
Specifies the security method of the server
Sign or sign and encrypt
•
Depending on the settings on the communications partner (client), the
reader selects the method with the highest possible security.
Sign
•
The reader only allows communication with signed frames.
Sign and encrypt
•
The reader only allows communication with signed and encrypted frames.
If the check box is selected, the reader allows anonymous users access to the
data of its OPC UA server.
Anonymous users do not need to give a user name/password when establish-
ing a connection. If anonymous access is not allowed, an OPC UA client or a
user must provide a valid user name/password combination of a user with
OPC UA rights. A user with OPC UA rights can be created via the WBM. The
user profile preinstalled in the factory (user name: "admin", password "admin")
also has OPC UA rights.
Button for creating an OPC UA server certificate.
Among other things the server certificate serves to identify the OPC UA server
to the OPC UA client.
The OPC UA server certificate contains the application name, the security
profile and the IP address of the reader. If any part of this information is
changed, the server certificate needs to be recreated.
Note: Note that the procedure can take several minutes.
SIMATIC RF650R/RF680R/RF685R
Configuration Manual, 03/2018, C79000-G8976-C386-06