Security Settings

Security Strategy

In the WinCC OA OPC UA server the supported profiles are fix-implemented. These are None and Basic128Rsa15. The None profile has to be enabled in the configuration file of the server by setting the disableSecurity entry to 1. The enabling applies to all clients that wants to connect the server and it is not possible to change it at server runtime.

Message Security Concept

In the WinCC OA OPC UA server the supported modes are fix-implemented. These are None, Sign and Sign&Encrypt.

None

The communication is neither signed nor encoded and thus it should be used only in separate networks.

Sign

The communication is signed but not encoded.

Sign&Encrypt

The communication is both signed and encoded. The user data cannot be interpreted. The receiver of the data can check whether the data has changed. In order to use the data this has to be decoded. This setting provides the maximum security, but need high computing power.