Siemens SIMATIC S7-1500 Function Manual page 271

OPC UA communication
9.4 Using the S7-1500 CPU as an OPC UA client
Setting the security parameters
1. Click the "Security" area in the "Configuration" tab.
This area contains all security settings for the connection to the OPC UA server.
The following settings are possible:
"General" area
Security mode:
Select the security mode that the connection to the OPC UA server must meet from the
drop-down list.
If the server does not meet the selected mode, a session is not established.
The following settings are available:
● No security: No secure connection!
● Sign: OPC UA server and OPC UA client sign the data transmission (all messages):
Manipulations can thus be detected.
● Sign & Encrypt: OPC UA server and OPC UA client sign and encrypt the data
transmission (all messages):
Security policy:
Set the encryption techniques for the signing and encryption of messages.
The following settings are possible:
● No security
● Basic128Rsa15
● Basic256
● Basic256Sha256
To configure a secure connection, you must observe the following items:
● A certificate is required for the client for a secure connection.
● You have to make the client certificate known to the server.
To find out how to proceed, see the section "Handling client and server certificates
(Page 183)" under "Certificate of the OPC UA client".
"Certificates" area
Client certificate:
The certificate confirms the authenticity of the OPC UA client.
To select a certificate, click the following symbol:
STEP 7 displays a list of certificates.
Select the certificate that you have made known to the server.
270
Function Manual, 11/2019, A5E03735815-AH
Communication