Download Report

Lenze OPC UA Communication V1.0
Components used:
Lenze:
94xx:
Easy Starter:
OPC UA Client:
Softing
Unified Automation
Highline FW 12
1.6
OPC UA Client
UAexpert
V1.2
V1.2.2 175
Easy Starter version 1.6 and higher is equipped with a specific OPC UA Server interface via
which an OPC UA Client can establish a connection.
Contents
1.
General ........................................................................................................................ 1
1.1. Advantages over the Lenze DriveServer: ................................................................. 1
1.2. Certificate .............................................................................................................. 2
1.2.1. Making the Client certificate known to the Server ............................................ 2
1.2.2. Making the Server certificate known to the Client ............................................ 2
1.3. Security levels ........................................................................................................ 3
1.4. Lenze recommendation: ......................................................................................... 3
1.5. Addressing the UA Server ..................................................................................... 3
1.5.1. Search function - OPC Client .......................................................................... 3
1.5.2. Endpoint URL.................................................................................................. 3
2. Settings of Lenze Easy Starter / OPC UA Server ............................................................. 4
3. Settings of Softing OPC UA Client V1.2 ......................................................................... 6
4. Settings of Unified Automation UAexpert Client V1.2.2 175 ....................................... 11
1. General
The two test OPC UA Clients can be obtained free-of-charge from the manufacturer's
website. Access to the manufacturer's download portal requires registration.
UAexpert
http://www.unified-automation.com/downloads/opc-ua-clients.html
Softing:
http://industrial.softing.com/de/downloads.html
1.1.
Advantages over the Lenze DriveServer:
Enhanced security for remote maintenance with little configuration efforts for the firewall
settings due to encrypted communication and certificate validation.
Page 1 of 15
Lenze OPC UA Communication V1.0
1.2.
Certificate
Security is enhanced because both Server and Client require a certificate from each other.
Communication is only possible if both Server and Client have assigned a valid certificate to
each other.
Server
Zertifikat
OPC UA Client
Client
Zertifikat
Lenze OPC UA Server
When started for the first time, the Lenze OPC UA Server generates a machine-specific
certificate for Server authentication. For the Client certificates, please check the
documentation for the corresponding Client application. For exchanging the certificates, the
certificate files must be stored in defined Client and Server directories ("Certificate stores").
1.2.1. Making the Client certificate known to the Server
The Client certificate file must be stored on the Server computer. Please refer to the
corresponding documentation for the OPC UA Client to learn how to export this file and
how to locate it on the Client computer. Use the dialog provided via the tray icon of the
Server application to make the certificate known to the Lenze OPC UA Server. Chapter 2
describes this procedure by means of examples.
1.2.2. Making the Server certificate known to the Client
In general, the Client is equipped with a mechanism that detects the Server certificate when
establishing the connection for the first time and will ask the user whether to accept it. In
this way, it will be stored in the corresponding directory without the user having to be
informed about the directory structure. If the Client does not support this mechanism,
please refer to the corresponding documentation for information on certificate
management and the defined storage directories. The Server certificate file can be accessed
via the dialog provided via the tray icon of the Server application. Chapter 2 describes this
procedure by means of examples.
Page 2 of 15
Lenze OPC UA Communication V1.0
1.3.
Security levels
OPC UA distinguishes between different security levels:
At present, the Lenze OPC UA Server supports the levels "Sign" and "SignAndEncrypt".
None:
Sign:
SignAndEncrypt:
No security level, fastest data transmission
Messages contain security codes
Messages contain security codes and are encrypted
There are also different encryption levels.
The Lenze OPC UA Server supports: None, Basic128Rsa15 and Basic256
None:
Basic128Rsa15:
Basic256:
1.4.
No encryption
128-bit encryption
256-bit encryption
Lenze recommendation:
SignAndEncrypt and Basic256 (most secure connection, encryption does, however, slow
down communication)
1.5.
Addressing the UA Server
With OPC UA, OPC UA Clients can find an OPC UA Server in two different ways.
1.5.1. Search function - OPC Client
This function requires an additional OPC Local Discovery Server which can be obtained free
of charge from the OPC Foundation.
https://opcfoundation.org/
https://opcfoundation.org/developer-tools/developer-kits-unified-architecture/localdiscovery-server-lds
1.5.2. Endpoint URL
The endpoint URL is provided by the OPC UA Server (Lenze). The URL address is copied to the
user's OPC UA Client.
Page 3 of 15
Lenze OPC UA Communication V1.0
2. Settings of Lenze Easy Starter / OPC UA Server
No.
1
2
3
Action
Comment
Start the Easy Starter
Establish an online connection with your Lenze device.
Click the OPC Disk button to save the current online
communication channel for the Lenze OPC UA Server.
In the example,
via the Lenze
diagnostic
adapter.
WIN 7 (64-bit)
Confirm the question with Yes.
4
The OPC_UA_Server_Config.xml configuration file is stored
under C:\ProgramData\Lenze\EASY Starter
After the configuration, start the Lenze OPC UA Server. A link can be found in the
Windows Start menu => All Programs => Lenze => OPC => Lenze OPC UA Server 1.6
Once the Lenze OPC UA Server has been started, the following icon (tray icon)
appears in the Microsoft Windows tray system.
Page 4 of 15
Lenze OPC UA Communication V1.0
5
A context menu with additional options is available in the system tray of the tray
icon. Right-click the symbol to access the corresponding settings.
Options:
6

Close the Lenze OPC UA Server.

Have a logging file with error information output.

Information on the Lenze OPC UA Server
- endpoint URL
- certificate management
The endpoint URL and the certificate information are required for the OPC UA
Client for the first connection.
Endpoint URL: opc.tcp://cde273987:62541/Lenze/OPCUAServer
For the OPC Client, a certificate is required. Via the Copy own certifcate button,
you can copy the certificate to a location of your choice.
Page 5 of 15
Lenze OPC UA Communication V1.0
7
If you need the certificate of the Lenze OPC Server for an OPC
Example of a
Client, click the Copy own certifcate button and select a target Server certificate
folder of your choice.
name:
Lenze OPC UA
Server
[D5DA1D798027
8062962125CB97
A2D11AEB0522A
2].der
3. Settings of Softing OPC UA Client V1.2
No.
1
Action
Start your OPC Client. In the example, this is a Softing Client.
2
At first, read in the Lenze OPC UA Server certificate. For this,
select the menu items Settings => Manage Certificates.
Page 6 of 15
Comment
Lenze OPC UA Communication V1.0
3
Click the Import certificate into trusted store button and
select the Lenze OPC UA Server certificate which you have
saved in step 7 of chapter 2.
4
After this, the Lenze OPC UA Server certificate will be
displayed.
5
Now you have to present the Softing OPC UA Client V1.2 certificate to the Lenze
OPC UA Server. In the Certificates Management window you can see where the
Softing certificate is saved on the computer.
Page 7 of 15
Lenze OPC UA Communication V1.0
6
Open the options window of the Lenze OPC UA Server
(chapter 1, step 5) and click Add.
Change to the directory of the Softing certificate and select
the certificate.
After this, the Softing certificate will be displayed.
Page 8 of 15
Lenze OPC UA Communication V1.0
7
Double-click Add to add a new session.
8
In the window that appears, you can choose between two
different options to establish a connection to the Lenze OPC
UA Server.
1. Entering the Endpoint URL (chapter 2, step 6)
2. Starting a search process on the computer by selecting
Local (requires the installation of a free-of-charge OPC
Local Discovery Server from the OPC Foundation)
Page 9 of 15
The search
process is the
better solution
since there may
not occur any
mistakes when
entering the
endpoint URL.
Lenze OPC UA Communication V1.0
9
If a search process is carried out by selecting Local, the Lenze
OPC UA Server will look as follows.
Here you will find the different security and enryption levels.
As described in the General chapter, we recommend to select
the security mode SignAndEncrypt and Basic256 /
Basic128Rsa15.
Click OK to establish a connection.
Page 10 of 15
You need the
Authentication
Settings area.
Lenze OPC UA Communication V1.0
10
If all settings are correct, the following window will appear.
In the tree structure in the middle you can see the Lenze OPC UA Server and the
Lenze Diagnostics Server. Further down in the tree you can find all parameters of
the connected Lenze devices. In the area marked in red you can see the current
parameter value of code C11 (motor reference speed).
4. Settings of Unified Automation UAexpert Client V1.2.2 175
No.
1
Action
Now, start your OPC Client. In the example, this is a Unified
Automation Client.
Page 11 of 15
Comment
Lenze OPC UA Communication V1.0
2
Click Add to add a new connection.
3
Under Local you will find the Lenze OPC UA Server with the
different security and encryption levels. As described in the
General chapter, we recommend the security mode
SignAndEncrypt and Basic256 / Basic128Rsa15.
Confirm your selection with OK.
Page 12 of 15
Lenze OPC UA Communication V1.0
4
Select Connect to establish a connection.
5
You will be prompted if you want to accept the Lenze OPC UA
Server certificate. Select Accept this certificate permanently.
6
Now, the Lenze certificate will also be displayed under the
menu items Settings => Manage Certificates.
Page 13 of 15
Lenze OPC UA Communication V1.0
7
Now, you only still have to register the OPC UA Expert
certificate with the Lenze OPC UA Server. For this, open the
options window of the Lenze OPC UA Server (chapter 1, step
5). Click Add.
8
Change to the directory of the UA Expert certificate and select the certificate.
Example:
C:\Users\harmsma\AppData\Roaming\unifiedautomation\uaexpert\PKI\CA\cert
s
9
After this, the UA Expert certificate will be displayed.
Page 14 of 15
Lenze OPC UA Communication V1.0
10
Now, the connection can be established by clicking Connect.
11
In the lower tree structure you can see the Lenze OPC UA
Server and the Lenze Diagnostics Server. Further down in the
tree you can find all parameters of the connected Lenze
devices. In the area on the right you can see the current
parameter value of code C11 (motor reference speed).
Page 15 of 15