Siemens SIMATIC S7-1500 Function Manual page 264

9. Do you want to use a secure connection?
– If you have selected a secure end point, then select the entry "TIA Portal" for the
– If you have not selected a secure end point, then keep the default ("None").
10. How do you want log on?
– If you want to log onto the OPC UA server as guest, then apply the default with "User
– If you want to log on with user name and password, select "User name and
11. Click on the "Go online" button.
When a secure connection is established, a message appears that you must accept the
server certificate for the secure connection to be established. In the message window,
you can display further details about the server certificate via a link.
This standard Windows window only provides information about the server certificate. If
you click on the button to install the server certificate, the server certificate is not saved to
the certificate memory of the TIA Portal, i.e. at the next connection attempt you will be
prompted again to accept the server certificate.
STEP 7 then establishes a connection to the OPC UA server and again displays the
editor for client interfaces.
In the right field of the editor, STEP 7 displays the uppermost level of the address space
of the OPC UA server:
Communication
Function Manual, 11/2019, A5E03735815-AH
"Certificate location".
And under "Certificate (Client)", select a client certificate for your PC on which STEP 7
(TIA Portal) is currently running.
If a client certificate does not yet exist for your PC, you can generate a client certificate
here in the TIA Portal.
Proceed as follows to generate a certificate for your PC:
- Click on the button in the "Certificate (Client)" input field.
- Click "Add".
- For "Certificate owners" enter "STEP 7 (TIA Portal)".
- Select the "OPC UA client" entry at "Usage".
- For "Subject Alternative Name (SAN)", enter the IP address of your PC, on which
you are currently running STEP 7 (TIA Portal), under "Value". Overwrite the already
entered IP address.
- If your PC uses a second IP address, enter this address as well. If your PC does not
use a second IP address, delete the second IP address already entered.
- Click "OK".
authentication".
password".
Use the user name and password which was stored during the configuration of the
OPC UA server in the properties of the CPU under "General > OPC UA > Server >
Security > User authentication > User management".
9.4 Using the S7-1500 CPU as an OPC UA client
OPC UA communication
263