Eclipse Community Forums: 4DIAC - Framework for Distributed Industrial Automation and Control » How to set user token policy in opc ua configuration file

Home » Eclipse Projects » 4DIAC - Framework for Distributed Industrial Automation and Control » How to set user token policy in opc ua configuration file(question about opc ua configuration file)

How to set user token policy in opc ua configuration file [message #1848761]

Thu, 16 December 2021 03:25

Eclipse User

I want to connect to opc ua servers which have some kind of security enabled. I config the security configurations for the endpoints in the configSecurity.forte file, but I didn't find user token policy parameter in the configuration file. If I only want to connect to opc ua server by username and password, there is no need to configure the certificate information. There should be a parameter that can be set to connect to the opc ua server via either anonymous, username and password, or certificate and private key.

Re: How to set user token policy in opc ua configuration file [message #1849095 is a reply to message #1848761]

Mon, 03 January 2022 12:22

Eclipse User

I am not 100% sure, but as far as I remember, a certificate is still required also for the SIGN policy (username and pass) for creating a secure channel. These initial messages should be signed with the client's certificate. At least in our implementation, this was the reason to have a certificate for the client for the username/pass login, if I recall it correctly. Probably, there are more options that we did not consider in our current implementation.

Re: How to set user token policy in opc ua configuration file [message #1849096 is a reply to message #1849095]

Mon, 03 January 2022 12:29

Eclipse User

just found what i think is the reason (part 4 opc ua spec):

Quote:

The OpenSecureChannel request and response Messages shall be signed with the sender's Certificate. These Messages shall always be encrypted. If the transport layer does not provide encryption, then these Messages shall be encrypted with the receiver's Certificate. These requirements for OpenSecureChannel only apply if the securityPolicyUri is not None.

This is probably what happens in the open62541 stack (and forte just follows the same requirements)

Re: How to set user token policy in opc ua configuration file [message #1849101 is a reply to message #1849096]

Tue, 04 January 2022 02:27

Eclipse User

Thank you very much for your help!

Previous Topic:	4diac Modbus Function Blocks
Next Topic:	Help- "Map to" option not displayed

Goto Forum:

-=] Back to Top [=-

Current Time: Wed Jul 30 08:32:53 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter