IBH Link UA:GDS
Overview
A Global Discovery Service (GDS) centralizes the management of OPC UA application certificates, trust lists and certificate revocation lists (CRLs). The IBH Link UA can be registered with a GDS and can request or renew certificates automatically.
Requirements
- Date and time on the IBH Link UA are correct.
- The GDS endpoint is reachable from the device network.
- The GDS is trusted by the IBH Link UA.
- The user account used for registration has the required permissions.
- Certificate group and certificate type match the OPC UA application.
Back up the existing configuration before changing certificates or trust lists.
Configuration
Configure the connection on the GDS page of the web interface:
- Enter the GDS server URL, for example
opc.tcp://gds-server:58810. - Select the device or application type.
- Configure authentication and the update interval.
- Map the local certificate groups to the corresponding GDS groups.
- Apply the settings.
- Register the device with the GDS.
Credentials are used for registration and group assignment and are not stored permanently.
Operation
After successful registration, the web interface shows the connection and registration status and the object ID assigned by the GDS. At the configured interval, the IBH Link UA checks whether certificates or trust lists need to be updated.
After a certificate renewal, verify that the OPC UA clients accept the new certificate. Events and errors can be reviewed in the GDS log in the web interface.
Troubleshooting
- Check network access and the port of the GDS endpoint.
- Verify date, time and time zone on both systems.
- Check the user name, password and registration permissions.
- Make sure that each local certificate group has a unique and compatible mapping.
- Check the certificate type and supported security policy.
- Download the GDS log and review the latest messages.