Hi All, 

By default, after you install OpenPCS 7 and download OpenPCS 7 file from ES, the OPC UA server is accessible by URL: "opc.tcp://[HostName]:4863"

The UA configuration can be found in C:\Program Files (x86)\Siemens\OPENPCS7\OPC\UAServer\OpcUaServerOpenPCS7.xml. 

Right click, edit in notepad. 

By default, the security policy was set to none and anonymous can access. 

To remove "None' in security policy , set from true to false. 

To remove anonymous from access and force to use username and password, remove the config line for "Anonymous"

Under <UserTokenPolicies>, remove the line or comment the line by <!-- xxxxx --> (HTML code) 

Save the xml and overwrite it in the ...\OPENPCS7\OPC\UAServer

Open Services.msc, look for OpcUaServerOpenPCS7, restart. 

Error below might show:"

Windows could not start the OpcUaServerOpenPCS7 service on Local Computer. 

The service did not return an error. This could be an internal Windows error or an internal service error. 

If the problem persists, contact your system administrator. 

"

The process exe look normal after acknowledge the error. Refresh the services.msc and the OpcUaServerOpenPCS7 back to running again. 

And now, if you check the OPEN PCS 7 OPC UA Server via OPC UA Client , you will need to access via certificate approval and username password. 

For my scnenario, i access via OPC Scout in another stations, add UA server, key in the path and port. 

Then, accept the certificate in OPEN PCS 7 Server , under path ...\OPENPCS7\OPC\UAServer\PKI\CA\rejected

Cut the certificate and move to  

...\OPENPCS7\OPC\UAServer\PKI\CA\certs\

Then, access from OPC Scout , select User authentication change

Key in Domain Name\Domain User1

Ensure the username consists of SIMATIC HMI group right in OPENPCS 7 station. 

Then, the user logon successfully and able to browse tags now. 

OpenPCS7 Manual

Compendium F

https://reference.opcfoundation.org/Core/Part2/v104/docs/4.5

Hope it helps