User Authentication - Siemens SIMATIC S7-1500 Function Manual

9.4.9.3

User authentication

In the OPC UA client interface of the S7-1500, you can set what authentication is required
for a user of the OPC UA client wishing to access the server. To do so, you must select the
corresponding client interface in the project tree of the requested S7-1500 CPU under "OPC
UA communication > Client interfaces" and select the type of user authentication in the
Inspector window under "Properties > Configuration > Security".
Types of user authentication
The following options are available for user authentication:
● Guest
The user does not need to verify authorization (anonymous access). The CPU creates an
anonymous session for the user, and the OPC UA server does not check the
authorization of the client user.
● User name and password
The user must prove authorization (no anonymous access). The OPC UA server checks
whether the client user is authorized to access the server. Authorization is given by the
user name and the correct password. These inputs cannot be checked by the client
interface, which means all values are accepted as being valid.
Note
STEP 7 stores user name and password unencrypted in the data block/instance data
block. Recommendation: Use the user authentication "User (TIA Portal - Security
Settings)".
● Users (TIA Portal - Security Settings)
You can enter a user name from the list of users entered in the project for authentication.
The names of the registered users for the current project are available in the user
administration in the project tree under "Security Settings > Users and roles". There you
can also enter additional users.
You can also enter a name that is not listed in the user administration of the project or
leave the field blank. This is necessary when the corresponding user name is only
provided by a different source during runtime, for example, via HMI or from a different
OPC UA client.
Communication
Function Manual, 11/2019, A5E03735815-AH
9.4 Using the S7-1500 CPU as an OPC UA client
OPC UA communication
275