OPC UA Server Configuration Options [ErgoTech Systems, Inc. TechWiki]

This is an old revision of the document!

ErgoTech OPC-UA Server - Configuration

A number of parameters can be controlled by the ErgoTechConfiguration.properties (TransSECS) or the mix.properties(MIX) file. A sample, file is installed with the application. If these parameters are not present in the file, the defaults will be used.

opcua.serverhosts If present the hostnames provided will be used to create endpoints for the server
opcua.certs.dir  The root folder for all certificates.  This defaults to "security" in the folder in which the application is started
opcua.servername The name of the server. This defaults to MIXOPCServer
opcua.tcp.port The port for opc tcp connections
opcua.https.port The port for https connections
opcua.certificates.dir The folder that contains the server certificate
opcua.serverpass The password of the server certificate
opcua.trusted.cert.location The location of client certificates.  This defaults to security/security/pki.  Three folders, //issuers//, //rejected//, and  //trusted// folders contain the certificates.  Trusted client certificates should be placed in the //trusted// folder

opcua.bind.address  Additional, local, interfaces to which to bind.
opcua.securitypolicy The OPC security policy to use.  Options are: //None, Basic128Rsa15, Basic256, Basic256Sha256, Aes128_Sha256_RsaOaep, Aes256_Sha256_RsaPss// .  These options are described [[https://profiles.opcfoundation.org/profilefolder/474|in the OPC Foundation Documentation]] .  If not specified, Basic256Sha256 will be used.  Note that //None// is insecure.  The ErgoTech OPC Server will, by default, present this on the local interface (accessible only by applications running on the same host).  //Basic256//, and //Basic128Rsa15// are deprecated and not recommended for security reasons.

TransSECS OPC-UA Server Setup

With the TransSECS OPCUA server deployment no additional setup is required for the TransSECS SECS/GEM server. The server is deployed in the project's OPCUA folder and can be run directly from there. The parameters above can be configured in the ErgoTechConfiguration.properties file.

MIX OPC-UA Server Setup

To run MIX as an OPC-UA Server you will need to add a library provided by ErgoTech to the MIX installation's lib directory and also add a driver jar to your MIStudio project's Drivers directory before deploying the project to MIX. Both of these libraries are provided by ErgoTech with the OPC-UA MIX package.

Set up MIX

Copy the library “OPCUAServerLauncher.jar” provided by ErgoTech to the MIX installation “lib” directory. Edit the mix.properties file in the MIX directory with a text editor (such as Notepad++) to make these changes:

change the line that says exported.only=true to exported.only=false
remove the “#” from (to uncomment) the line that says “#export.servers=OPCUA” so it says “export.servers=OPCUA”

Note that changing the property “exported.only” in mix.properties from true to false will cause all servers in the logic (Diagram Window) of your MIStudio project to be published in the OPC-UA Sever. If you want more control over what is published, leave this as “exported.only=true”, and set each logic bean's expert property “Export Criteria” from “No Export” to the export criteria of your choice (usually Read-Only, but could be Read/Write depending on the server.

Start MIX so it is ready for an MIStudio deployment.

Set up your MIStudio project

Start MIStudio and load the project you want to use for the OPC-UA Server tags. Right click on the Drivers node of MIStudio and browse for the OPC-UA enabler library “OPCUAServerVIBImpls.jar”. This needs to be part of the deployment to MIX with the built project.

Any server or manipulator you place in the Diagram Window logic will become a tag in the OPC-UA Server if you have set “exported.only=false” in mix.properties. If you do not want all the logic servers and manipulators to be tags in the OPC-UA Server then you can use “exported.only=true” in the mix.properties, and then specifically set the server to be exposed as a tag in the OPC-UA Server by setting its expert property “Export Criteria” from the default “No Export” to “Export Read-Only” or “Export Read/Write”. Only manipulators can be set to Read/Write (servers only provide values so are Read-Only).