• Operating System:Windows 11 Pro
• TIA Version:V20.3
• WinCC Unified:V20.3
• The desired application: OPC UA Server, OPC UA Client

Trying to build:

• I have PLC_1, PC_System_1, PC_System_2.
• • PC_System_1(MRI) and PC_System_2(PC-MRI) each have WinCC Unified WebServer
  • PC_System_1 also has OPC UA Server
• PC_System_1 has two network cards.
  • In first network is PLC_1 and in the other is PC_System_2
• I want to make OPC UA Server, which physically separates those networks.
  • PLC_1 communicate with WebServer PC_System_1 (First network)
  • PC_System_1 Webserver communicates with OPC UA Server (First network)
  • OPC UA Server Communicates with PC_System_2 (Second network)

Problem:

• I'm not succesfull in configurationg OPC UA Server, to make it start and work
  • because when I want to write or read to/from OPC UA Server, it writes: cannot connect in tiaportal [ScreenShots.PC2_Tags_after.png] and some error message in UaExpert [ScreenShots.UaExpert2.png]

1. Made network structure [ScreenShots.Network.png]
2. Made PC_System_1 works as OPC UA Server [ScreenShots.PC1_Conf1.png & ScreenShots.PC1_Conf2.png]
3. For testing I chose no security [ScreenShots.PC1_Conf3.png] 
4. Made connection OPC-PC1 between PC_System_1 and OPC UA Server & Made connection OPC-PC2 between PC_System_2 and OPC UA Server [ScreenShots.PC2_Connection.png; for PC1 difference: connection OPC-PC1]
5. Loaded to devices
6. Tried to make tags, but OPC UA Server not connected [ScreenShots.PC2_Tags.png]
7. Also tried UaExpert [ScreenShots.UaExpert1.png], but not working too [ScreenShots.UaExpert2.png]
8. Then I tried to make certificates and installed them [ScreenShots.Certs.png], not better
9. Also lokked at firewall, but it looks like used port 4840 is used only for OPC UA Server, also chech via cmd, netstat

Thank you for your help

Hello Kristalek

you have set up without security but I would check in the Unified Runtime manager if there is a rejected certificate from the OPC UA Client or UAExpert (while Unified PC RT is running)

perhaps you have to trust before it works (event if you do not use any security settings)

I have no problems accessing the OPC UA Server of the Unified RT from UAExpert

Bye Murof

Hello Murof, 

Thank you for your answer 

there are no rejected certificates from the OPC UA Client or UaExpert (while Unified PC RT is running).

Would you be so kind and write the steps you did to create oan fucntioning OPC UA Server and Client with checking it's function via UaExpert? (I know there are lot's of tutorials on internet but none of them worked...)

Have a nice day 

Hello Kristalek

I did again a quick test with TIA V20 Upd3

- I have created in Certificate Manger my CA, My device and Webserver and OPC UA Server certificate. All is installed and also CA is installed on the Engineering PC

- in WinCC Unified Project OPC UA Server is activated and all security policys are activated 

- I have loaded the Runtime in Runtime Manager and started the Unified PC RT (no Simulation) on Engineering PC (Test all on one system)

- Start UAExpert and create a new Server connection (no security and anonymus)

- connect-> certificate message appears in UAExpert-> Accept the Cert of the Server for this session

--> connecto could be established-> server and Tags can be browsed and read/write also works 

If you would use security then also the certifiate trust has to be done on both sides

(works also with Username/PW and Security policy with UA Export on my system)

Bye Murof