IBH OPC UA:Startup operations

The IBH OPC UA Server/Client is a 64-bit software solution for Windows and Linux PCs. This guide replaces the commissioning section of the V5.27 PDF manual and describes the current workflow for version 6.10.

Workflow at a glance

1. Install the software and start the service or server.
2. Open the Web Configurator and set the administrator password.
3. Check the network, endpoint and firewall.
4. Configure OPC UA security and certificates.
5. Activate the license online or with a signed JSON license file.
6. Transfer the PLC or device project with the IBH OPC UA Editor.
7. Test controller connections and OPC UA access.
8. Back up the configuration.

Installation

Windows

1. Download the current 64-bit setup from the IBHsoftec download area.
2. Run the setup with administrative privileges.
3. Select the components required for the target computer.
4. Restart the computer if requested by the setup.
5. Start the IBH OPC UA Server/Client or its service.

Starting the IBH OPC UA Server/Client. The appearance may differ depending on the Windows and product version.

The Windows tray application provides quick access to start/stop, the Web Configurator and diagnostics. If the tray icon is not visible, start IBH OPC UA Tray from the Windows Start menu.

Starting IBH OPC UA Tray from the Start menu.

Linux PC

Use the 64-bit package supplied for the target platform and follow the installation instructions included with it. The server runs as a service. Start, stop, logging and automatic startup are controlled by the service manager of the Linux distribution. Do not copy Windows runtime, configuration or license paths to Linux.

Open the Web Configurator

On Windows, the Web Configurator can be opened from the tray menu.

Opening the Web Configurator from the tray.

Alternatively, open:

• on the server PC: http://localhost:<web-port>
• from another computer: http://<IP-address-or-hostname>:<web-port>

The web port is shown in the local configuration or tray menu. For remote access, allow this port explicitly in the firewall.

Signing in to the Web Configurator. Older screenshots may differ from the current dialog.

Use the credentials selected during installation or initial setup. Change any factory or temporary administrator password immediately after the first sign-in. Store it securely; losing the administrator password may require a reset.

Basic configuration

Network and endpoint

1. Check the computer's hostname, IP address, subnet and default gateway.
2. Select the OPC UA port according to the plant network design.
3. Record the displayed endpoint URL.
4. Allow only the required web, OPC UA and, if used, outgoing client or MQTT connections in the firewall.
5. Prefer a DNS-resolvable hostname.

An endpoint URL has the form opc.tcp://server-name:port. The hostname or IP address must match the server certificate used by the client.

OPC UA security

1. Enable only the security policies and message modes that are required.
2. Prefer signed and encrypted connections.
3. Disable anonymous access when the application requires user authentication.
4. Use compatibility options for insecure legacy connections only when strictly required.
5. Verify the system date, time and time zone.

Certificates

The Certificates section manages server, client and trust lists.

• identify untrusted client certificates before trusting them
• replace expired certificates
• use CSR and certificate import for CA-signed certificates
• when using GDS, check assigned certificate groups and issuers
• protect certificate backups and private keys

Licensing

The former activation process based on a hardware ID, email, serial number and PIN is obsolete.

Preferred online activation uses:

• the license serial number
• its associated eight-digit secret
• a connection to the Copilot license server

For offline systems, the Web Configurator creates the system-bound file ibhlinkua-license-request.json. After external processing, install the signed JSON license file on the target system.

See Licensing for the complete procedure.

Transfer a project

Use the free IBH OPC UA Editor for new projects.

1. Add the target server in the editor.
2. Read the existing server configuration when required.
3. Import or create a STEP7, TIA Portal or editor project.
4. Select controllers, data blocks and variables.
5. Validate the project.
6. Transfer the configuration to the server.
7. Verify connection and variable status in the Web Configurator.

For S7-1200 and S7-1500, access to optimized data blocks is supported. The imported project must match the version downloaded to the CPU.

See TIA Portal examples and STEP7 / SIMATIC Manager examples.

Functional test

Server status

The Web Configurator must show a plausible server uptime, endpoint and license status. Then check controller diagnostics for every configured connection.

System view of an older version. The current view also contains the new license status and additional diagnostics.

Test with an OPC UA client

1. Add the endpoint.
2. Select the security policy and message mode.
3. Verify the server certificate fingerprint and issuer.
4. Sign in when anonymous access is disabled.
5. Browse the address space.
6. Read test variables and write only where intended.
7. Check status codes and timestamps.

Additional functions

After successful basic commissioning, the following functions can be configured depending on the target system and license scope:

• integrated OPC UA Client and HOT redundancy
• History
• Alarms & Conditions
• MQTT including Sparkplug B
• Modbus TCP/RTU
• Mitsubishi and Rockwell connectivity
• SINUMERIK/CNC
• GDS certificate management
• integrated S7 SoftPLC
• Docker management on supported installations

Enable extensions one at a time and back up the working configuration before major changes.

Backup and restore

1. Open the System section in the Web Configurator.
2. Create a configuration backup.
3. Store the backup and related license information securely.
4. For a system migration, create a new license request; a license file cannot simply be copied to another computer.
5. After restoring, verify network, certificates, license and all connections.

Troubleshooting

Web Configurator cannot be reached

Check service status, web port, local binding, firewall and URL.

OPC UA client cannot connect

Check the endpoint, OPC UA port, security policy, system time, certificate and user authentication.

Controller remains disconnected

Check the IP address, rack/slot, routing, CPU state and project version.

Variables are missing

Recompile the project, import it again in the IBH OPC UA Editor and transfer the current configuration.

Online activation fails

Check Internet access, DNS, proxy, firewall, system time, license serial number and eight-digit secret.

See also

• Manual overview
• Licensing
• IBH OPC UA Editor
• Client functions
• Archived commissioning PDF V5.27 (German)