
QuickOPC allows you to change this behavior, or even pick the precise endpoint - see e.g. Certificate exchange is not required with insecure endpoints, and that's why you do not see the QuickOPC app (client) certificate in the Kepware UA server.

QuickOPC, by default, selects the insecure endpoint. In the Matrikon client, the secure configuration was chosen, and the certificates were mutually checked. The client can pick the endpoint configuration it wants to use. The server provides an endpoint (the one highlighted on your picture) which has two configurations: one for insecure communications ("None"), the other for secured communications. For more information, check the respective server's documentation.1. This certificate is then supplied to your third-party OPC server in a way specific to that server.
#Kepware client download#

The Ignition OPC UA server sends the client certificate to the third party OPC server when it tries to make the connection, however if the OPC server is not designed to expect these certificates then there may not be a straight forward way to accept them. The only difference may be in the way that the certificates are accepted on the server. While the above example is specific to KEPServerEX, the same concepts apply to connecting to any other third party OPC server that accepts OPC UA client connections. For more information, look into allowing "anonymous login" in KepServer's OPC UA Configuration Manager documentation. Alternatively, individual Kepware Projects can allow anonymous login. This typically means you need to specify user credentials for Ignition to use in the OPC UA server connection. When connecting to KepServer, some versions may not allow anonymous connections by default. Both the Backup Discovery URL and Backup Endpoint URL properties need to be configured.įor additional information on Failover, refer to OPC UA Client Connection Settings. The Backup properties should be used when a pair of redundant Ignition Gateways are trying to look at the same Kepware OPC UA server. To enable failover, check the box to Show advanced properties in the New OPC UA Connection Settings, set the Failover Enabled property to 'true,' and specify the Failover Endpoint. The failover Kepware OPC UA server will be used in the event the primary Kepware server goes down. The failover Kepware OPC UA server works the same as the OPC UA server with the exception that you need to have two copies of Kepware setup, preferably on different servers. Expand the KEPServer object until you find tags.

The next step is to have KEPServerEX trust the Ignition OPC UA Client. This is expected because KEPServerEX is denying access to the Ignition OPC UA Client.
#Kepware client password#
Fill in the Username and Password if your KEPServer connection requires it.

