Connecting a Kepware Client to an OPC UA server involves establishing a communication link that adheres to the OPC UA standard. It requires managing security certificates, defining connection details within Kepware, and importing the OPC UA server's tag structure. Configuration includes the certificate exchange, specifying server endpoints, and adding relevant tags.
On this page:
System Requirements
- KepServerEx V5 (or superior).
- OPC UA Protocol
How to Use
The procedure for a successful OPC UA connection is divided into three main steps.
- KepServerEx OPC UA Client Certification
- Creating certificates for the OPC Server
- Kepware OPC Client Configuration
KepServerEx Client Certificate
In the Kepware OPC UA Configuration Manager, go to Instance Certificates (1). In the Client Certificate portion, click Export Client Driver Certificate... (2), and save the file in any folder you want.
OPC UA Server Configuration
1 - Navigate to the Runtime / Startup tab, locate the OPCServer option in the Startup Modules, and check it. Then, click on the gear icon to open the OPC UA Server Configuration Helper.
2 - The OPC UA Server Configuration Helper page is where the OPC UA Server properties are configured, such as Endpoints, Security Policies, and Certificates (Client and Server).
3 - In the ClientCertificate section, Import a Client Certificate and browse for the Kepware Client Certificate.
4 - In the Server Certificate section, click Export Certificate and save it.
KepServerEx Configuration
5 - In the KepServerEX Configuration display, right-click Connectivity and select New Channel. From the Channel Wizard popup, browse for the OPC UA Client.
6 - Fill in the labels with the OPC UA Server Configuration Helper information.
7- After creating the channel, right-click on Channel and select New Device. The import tool WILL NOT work right now because the OPC Server (Solution) is not running yet. Click on Next and complete your configuration.
Importing Server Certificate
8 - After creating the Device, go to the OPC UA Configuration Manager, navigate to the Trusted Servers tab, and import the OPC Server certificate you created in step 4.
9 - Once you have completed the previous step, restart the KepServerEX service.
Solution Runtime
10 - Once the configuration is done, you can launch the Solution to test the communication exchange. Remember to have the OPC Server Module enabled on Runtime / Startup.
11 - You can now go to your Kepware Device and Browse for the existing Tags.
The Tags Visibility property (on Unified Namespace/Tags) must be configured according to the description below:
- Public: Can be read and write in your OPC
- Protected: Can only be read
- Private: will not be seen or browsed
In the Module Information diagnostic tool, you can monitor the clients that are currently connected to your server. As an example, in the image below, there is one client (Kepware’s OPC Quick Client) successfully communicating with our solution.
In this section: