YASKAWA VIPA System SLIO Manual page 204

Deployment OPC UA
Usage OPC UA Configurator > Server settings - Connection
General
Network
Security
Security Check Overrides
204
You can set for the OPC UA server how a user of an OPC UA client must prove their
identity for access to the server. Select at least one of the following login methods. You
can also combine the two login methods with each other.
n 'Activate anonymous login'
– The OPC UA server does not check the authorisation of the OPC UA client.
n 'Activate user/password login'
– The OPC UA server checks using the user name and password whether the
access of the OPC UA client is authorised. To do this, the server evaluates the
role assigned to the user.
n 'Allow obsolete security guideline'
– Allows the selection of the two obsolete security guidelines 'Basic128Rsa15' and
'Basic256' (not recommended)
n 'Application name'
– Clear identification of the application in the OPC name space.
n 'End point port'
– TCP port for binary data exchange (standard: 4840).
Activate only security guidelines that are compatible with the protection
concept for your machine or system. Deactivate all other security guide-
lines.
n 'None'
– Insecure data traffic between server and client.
n 'Basic128Rsa15'
– Secured data traffic, 128-bit encoding with key wrap algorithm RSA-15, (allow
option with 'Allow obsolete security guideline' see above).
n 'Basic256'
– Secured data traffic, 256-bit encoding (allow option with 'Allow obsolete security
guideline' see above).
n 'Basic256Sha256'
– Secured data traffic, 256-bit encoding with hash algorithm SHA-256 (recom-
mended).
Encoding:
n 'Sign'
– Endpoint secures the integrity of the data through signing.
n 'SignAndEncrypt'
– Endpoint secures the integrity and confidentiality of the data through signing and
encoding.
n 'Both'
– The OPC UA server offers both encryption methods 'Sign' and
'SignAndEncrypt' . The OPC UA client can use one of the two encoding methods.
Here you can allow various exceptions in the security check, in order to increase the error
tolerance.
Ä Chap. 7.7.8 'Role management
HB300 | CPU | 013-CCF0R00 | en | 19-30
VIPA System SLIO
' page 208