How to Configure the OPC UA Wrapper for OPC DA Clients

When configuring the UA Wrapper, you can set certain security levels, since the goal is to convert an OPC DA server into an OPC UA server. This allows the new OPC UA server to have configurable security options.

For this exercise, you should already have defined which OPC DA server you want to publish as OPC UA. Once done, you will see a screen similar to the one below:

In the previous panel, you will find a series of icons in the toolbar. The first step is to create a new user, for which we will select the "Users" icon. This will open a blank panel. Next, we need to right-click on the panel to create a new user. Then, we will enter the corresponding credentials for the new user.

After this, we will modify the security settings. To do so, select the icon next to "Users." In this section, you will be able to choose the type of security that best suits your needs.

After making these changes, it is necessary to restart the Wrapper service for the changes to take effect. You can do this from the Windows Services panel by searching for "Matrikon OPC UA Wrapper." Alternatively, you can restart it from the Tunneller panel. In the icon toolbar, next to the "Users" icon, you will find an icon with a square on the left to stop the service. Afterward, simply click on the "play" icon to restart it.

Once you have done this, we can test the connection using a UA client. For this exercise, we will use the Unified UA client, which you can download from the following link: Unified OPC UA Client.

Important Note: When attempting to connect to the Wrapper, you may encounter a message indicating that communication is not allowed. It is important to check the Tunneller screen to see if the UAClient certificate was rejected. If so, you need to move it to the "Trust" folder. To do this, go to the Tunneller panel, and in the icon toolbar, look for the icon that has a certificate with an "X".

Right-click on the certificate and select the "Copy" option. Then, go to the "Approved Certificates" section and paste it into the blank box to have it accepted. Afterward, go to the "Rejected Certificates" panel and remove the certificate from there. Once this is done, you can return to the UAClient and try connecting again.

Created by JF