OPC UA Security

Ignition
1

I'm new to Ignition and struggle with an OPC UA Security problem. Tried several OPC clients to connect to the Ignition OPC server. Only when i use "Basic256Sha256,None" as Security Policies i'm able to connect.

On the internet are some post's to find, but they all end up in the solution for Security Policies with None active and that's not secure.

Everything is set according the manuals and certificates are available on both systems (client/server). The only connection that works is Ignition's own OPC UA client (loop back) based on localhost, hostname and IP-address. Bind address is set to 0.0.0.0 and Endpoint Addresses is set correctly. All other settings for the OPC module are from the default install inclusive the user name/password.

Tips are welcome, or is it really only possible with security policies on None.

Used Version: 8.1.38 (b2024030513)

2

Depends on the client. Some are broken, some work.

UaExpert works as long as you use the "Custom Discovery" option and don't just manually enter the endpoint information.

Kepware's UA client is broken, though they told me at the OPC interop event recently that they think it's fixed in the very latest release.

What clients are you using? Did you restart Ignition after making changes to the OPC UA server settings?

3

Thanks for your answer.

I did restart on each change. That's how the None setting got active.

I used the following clients;

  • KEPServerEnterprise v6.9.584.0
  • Softing dataFEED OPC UA Client v2.20.0.23900
  • Rockwell 6.21.00 (CPR 9 SR 12)