OPC UA requires the use of certificates to identify the endpoints. Test tools and other applications may choose to ignore that security requirement or allow it to be disabled but VTScada does not. As noted in the help for the driver "VTScada ALWAYS requires a trusted server certificate".
The server MUST have a certificate that is trusted by VTScada and validates correctly for the endpoint URL configured in VTScada and the certificate is correctly signed and is within the validity dates.
This means that if the endpoint uses a host name, e.g. opc.tpc://myopserver.somedomain.com:4840
then the hostname element MUST appear in either the certificate Subject field (as a CN element) or in the Subject Alternative Name field (SAN) as a DNS Name
element exactly as specified in the URL.
If the system does not have name resolution configured and an IP address is used, e.g. opc.tcp://1.2.3.4:4840
, then the IP MUST appear in the certificate SAN field as an IP Address
element.
If the certificate is not issued by a trusted CA, e.g. it's self-signed, then the certificate MUST be manually trusted by viewing the driver "Server Certificate" tab, selecting the certificate in the untrusted list and clicking the "Add Trust" button.
Like all drivers in VTScada, you can draw a Statistics Dialog button (Diagnostics -> Comm Stats Btn) that will display some info about the connection including the latest error.
OPC UA requires the use of certificates to identify the endpoints. Test tools and other applications may choose to ignore that security requirement or allow it to be disabled but VTScada does not. As noted in the [help](https://www.vtscada.com/help/Content/D_Tags/D_OPCUA_Tag.htm) for the driver "VTScada ALWAYS requires a trusted server certificate".
The server MUST have a certificate that is trusted by VTScada and validates correctly for the endpoint URL configured in VTScada and the certificate is correctly signed and is within the validity dates.
This means that if the endpoint uses a host name, e.g. `opc.tpc://myopserver.somedomain.com:4840` then the hostname element MUST appear in either the certificate Subject field (as a CN element) or in the Subject Alternative Name field (SAN) as a `DNS Name` element exactly as specified in the URL.
If the system does not have name resolution configured and an IP address is used, e.g. `opc.tcp://1.2.3.4:4840`, then the IP MUST appear in the certificate SAN field as an `IP Address` element.
If the certificate is not issued by a trusted CA, e.g. it's self-signed, then the certificate MUST be manually trusted by viewing the driver "Server Certificate" tab, selecting the certificate in the untrusted list and clicking the "Add Trust" button.
Like all drivers in VTScada, you can draw a Statistics Dialog button (Diagnostics -> Comm Stats Btn) that will display some info about the connection including the latest error.
Software Developer with Trihedral