cancel
Showing results for 
Search instead for 
Did you mean: 

Plant Connectivity 15.1 error on connection to an OPC UA Server

Former Member
0 Kudos

Hello,

I am trying to connect SAP PCo 15.1 to an OPC UA Server, i click the browse domain button in order to get the available OPC UA server but i am not getting result at all, i wrote the discovery server name and the server endpoint address but the result is the same. I tried to connect another OPC client to  the OPC UA server in order to make sure it was not a network problem and the connection was successful.

Thanks in advance, Victor

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Victor,

I had the same issue than you but I achieved to establish the communication between PCo (OPC client) and Kewpare (OPC UA Server).

Before configuring PCo, I established the communication between the Kewpare OPC UA Server and other Kepware (OPC Client), installed in the same server than PCo, in order to configure the endpoint and exchange the certificates between the server and client. After that, I moved to PCo and re-tested the communication and it was OK.

Former Member
0 Kudos

Hi Sergio,

The solution was to change the authentication permissions on the OPC UA endpoint, after this the communication between PCo and OPC is OK.


Best Regards.

Former Member
0 Kudos

Hi Victor Hugo,

Which security policies have you enabled in the endpoint properties?

We would want to use only the 'Basic128Rsa15', but we don´t know how to exchange/import the certificate in PCo side.

Regards

Answers (1)

Answers (1)

former_member196557
Active Contributor
0 Kudos

Hi Victor,

  1. Which version/SP/Patch of PCo?
  2. Which OPC Server version/SP are you trying to connect to?
  3. Which version of the OPC Discovery Server is deployed?
  4. Which 'other OPC Client' are you testing with that is successful?

Regards, Steve

Former Member
0 Kudos

Hi Steve,

  • Which version/SP/Patch of PCo?

          SAP PCo 15.1.2

  • Which OPC Server version/SP are you trying to connect to?

               KEPServerEx

  • Which version of the OPC Discovery Server is deployed?

               The deployed version is OPC UA Locla Discovery Server 1.02, i do not know if this is the                     required because the OPC UA server is not in the local machine.

  • Which 'other OPC Client' are you testing with that is successful?

               UA Expert v. 1.3.8

Best Regards, Victor

former_member196557
Active Contributor
0 Kudos

Hi Victor,

  1. what url are you specifying for the connection between PCo and Kepware? (provide PCo screenshot of agent configuration)
  2. have you confirmed using Kepware OPC UA Configuration that above url is configured for access? (provide screen shot of Kepware OPC UA Configuration settings)
  3. What security model is required for the connection in production?

Regards, Steve

Former Member
0 Kudos

Hi Steve,

  • what url are you specifying for the connection between PCo and Kepware? (provide PCo screenshot of agent configuration)

         

                        

  • have you confirmed using Kepware OPC UA Configuration that above url is configured for access? (provide screen shot of Kepware OPC UA Configuration settings)

                   

  • What security model is required for the connection in production?

                    I do not undestand this question. In the security tab on the PCo i only fill the user and                     password field.

     Best Regards, Victor

former_member196557
Active Contributor
0 Kudos

Hi Victor,

1. from task bar, find and right click on Kepware icon and select OPC UA Configuration, or if in Windows 8.1/server 2012, click on the Start menu icon, type Kepware and select OPC UA Configuration

2. provide a screen shot of what OPC UA endpoints are exposed for Kepware where it is installed and running.

Regards, Steve

Former Member
0 Kudos

Hi Steve,

The screenshots of the SAP UA configurations are:

Best Regards, Victor

former_member196557
Active Contributor
0 Kudos

Hi Victor,

The endpoint you have defined in PCo is not enabled on the  Kepware OPC UA configuration. You need to add an endpoint using the Kepware UA Configuration with security policy set to None i would recommend using a different port number for the new endpoint as well.

Are Kepware and PCo installed on the same server?

Regards, Steve

Former Member
0 Kudos

Hi Steve,

The PCo and Kepware are not in the same server.

When i click on the start Discovery button i get a communication error. If  i click on the brose domain button i do not see the server where the Kepware are installed.

The endpoint i defined is the fist one and the enabled check is mark.

Best Regards, Victor

former_member196557
Active Contributor
0 Kudos

Hi Victor,

Forget about the Discovery Server for now. Create the correct endpoints for None Security on the Kepware side, I would create one for the server IP address with a separate Port, and then another for LocalHost (if you want to use None security with a local UA client), and then correctly enter the endpoint in PCo for the Kepware server's ip endpoint. Note, you need to stop and restart Kepware Runtime after you update the endpoint configurations.

Regards, Steve

Former Member
0 Kudos

Hi Steve,

The solution was to change the authentication permissions on the OPC UA endpoint, after this the communication between PCo and OPC is OK.

Best Regards, Victor

Former Member
0 Kudos

Hi Steve,

I have configured and established the communication between an OPC UA Server (Kepware v5.21) and an OPC UA Client (PCo 15.1) adding a new server endpoint and exchanging the certificate in the 'Trusted servers' tab. For this configuration, I have selected 'none' in security policies.

However, I don't know how to configure PCo when I change the security policy from 'none' to 'Basic 128RSA15' in Kepware.

Could you help me with this issue?

Should I exchange the certificate again if I modify the security policy?

Thanks in advance.

former_member196557
Active Contributor
0 Kudos

Hi Sergio,

The Kepware Certificate exchange is only for exchanging certs between two Kepware Server instances where one is an OPC UA Server and the other is an OPC UA client and they are installed on separate servers.

Unless you actually need certificate authentication, I would recommend that you use the NONE security level, especially if the Kepware and PCo are installed on the same server. Certificate authentication requires either self-signed or certificate-authority-signed certificates for PCo and certificate management of these between PCo and Kepware, and the OPC UA Discovery Server is one is used.

Regards, Steve