User Documentation
Table Of Contents
- Table of contents
- 1 Introduction
- 2 Safety instructions
- 3 System overview
- 4 Operating behavior
- 5 Software installation
- 6 Configuration
- 7 Program development
- 8 Licensing
- 9 Device Administration (DevAdmin)
- 10 Software units
- 11 OPC UA Server
- 12 Node-RED
- 13 LongtermDiagnosticMonitor
- 14 Data recorder
- 15 Diagnostics
- 16 Maintenance
- 17 Technical data
- 18 Directives and standards
- 19 Appendix: Tutorial - creating an IEC project
- 20 Appendix: Addressing in the Ethernet (basics)
- 21 Appendix: Tutorial FoE
- 22 Appendix: Tutorial - call C function from IEC
- Index

OPC UA Server
System manual
2696790000/02/04.2020
59
The OPC UA Server automatically creates the following directories on the
controller in the directory /opt/kecontrolapplication/OpcUa/PKI/CA:
Directory Description
/own
Contains the secret server key and the server certificate.
/trusted/
certs
Contains all trusted client certificates.
/trusted/
crl
Contains all revoked certificates (Certificate Revocation List). These
clients can no longer connect.
/issuers/
certs
Contains all trusted certificates used for verification.
/issuers/
crl
Contains all revoked certificates (Certificate Revocation List), used for
verification.
/rejected
Contains all client certificates rejected by the server. These clients cannot
connect.
The OPC UA Server generates a server certificate (uaserverc.der) during
startup. Instead of the automatically generated server certificate, you can
also use your own generated certificate, which has to be stored in the direc-
tory /opt/kecontrolapplication/OpcUa/PKI/CA/own. This certificate
must be known to each OPC UA client that wants to authenticate itself to the
OPC UA server.
Only connection requests from OPC UA clients whose certificate is stored in
the /trusted/certs directory are accepted. If a client connects to the
server and its certificate is unknown, the connection setup is rejected and
the rejected certificate is stored in the /rejected directory.
After the client and server have successfully authenticated themselves, user
authentication with user name and password is also essential.
11.3 Server configuration
In this chapter the configurations of the OPC UA server are described.
These can be made via "Expert entries" in the u-create studio. All OPC UA
configurations must be listed in the [OpcUa] section. Configuration changes
only become effective after restart.
Application-specific configurations
The following application-specific settings can be configured:
Designation Description
Port Server port
ApplicationName Application name
ApplicationURI Application URI
ProductURI Product URI
ProductName Product name
ManufacturerName Manufacturer name