Input.OPCUA : Connection with certificat

Hi @Loic_Winkelmann,
I am just going to see if I can provision a VM with Beckoff and have a go

Hello,
I can provide you teamviewer or something like that if you want to save time.
Loic,

Hello,

But twincat is verry specific you can not use it on VM and Windows 11.
The easier way is to use a PLC.

Let me know.
Loïc,

Hi @Loic_Winkelmann,
I was able to setup Twincat on a VM with the OPC UA server and connect via a standard client. Currently I have absolutely no understanding why Telegraf’s certificates are being rejected by TwinCat. In most other OPC UA servers they work fine using this method.

I believe its worth talking to BeckOff and showing them the steps you took to see if they notice anything we are doing wrong. I will ask my colleague about our own certificate testing

The only possibility is that since the OPC UA server is also uses a self-generated certificate this might also need to be accepted on the client side which might be causing the error. I noticed this within my OPC UA browser which forced me to accept the certificate client side

Hello,
You are right !
I must trust and saved the certificat

Hello,

IT IS WORKING :slight_smile: Thx you Jay !!

The problem is the following one: telegraf is using a length of 2048 for the certificat.
Beckhoff server is using a 4096.

To fix it you have to do :

  • delete certificates in: Server\PKI\CA\own\certs & Server\PKI\CA\own\private
  • update Server\TcUaServerConfig.xml, change keylength to 2048
  • restart UA server