2.3 KiB
2.3 KiB
| task | version | source | status |
|---|---|---|---|
| Read-only checks of ACCESS Service (OPC UA server, OPC clients, ODBC server) | R1.03 | IM 36K10L45-01EN §1–§3, §6, §9, §10; practiced on the test system 2026-10-01 | verified |
ACCESS Service checks (read-only)
| Check | How | Test system result |
|---|---|---|
| Processes | tasklist → opxuas.exe (UA server), opxuac.exe (one per OPC UA line + opxuac_mon), opxdas12.exe / opxaes.exe (only while a client is connected), opxdac.exe/opxaec.exe (per line); durwfp -p <name> -t 0 → 0 = attached |
opxuas, opxuac (OPXUAC_MON) running |
| Ports | netstat -ano LISTENING: 34493 (OPC UA server), 1583 (ODBC), 135 (DCOM) |
34493 yes, 1583 no |
| Start log | %TLS_LOG_PATH%\ci_start.log, umhlog.log |
InitializeSslCtx(): SSL_CTX_use_certificate_chain_file() failed + Process ODBSRV exited unexpectedly = ODBC server cannot load its certificate (ISS-008) |
| ODBC settings | tls\sup\odbsrv.sup (PORT, USESSL), certificate %TLS_ROOT_PATH%\tls\pki\odbsrv\SampleServerCertificate.pem + key |
USESSL YES, folder missing |
| OPC UA server settings | tls\sup\opxuas.sup; endpoints and user tokens in tls\exe\ServerConfig.xml (ignore commented XML) |
Endpoint opc.tcp://[NodeName]:34493; Basic256Sha256 / Aes128_Sha256_RsaOaep / Aes256_Sha256_RsaPss with Sign or SignAndEncrypt; anonymous, user/password, certificate tokens on |
| OPC UA certificates | %TLS_ALLUSERS_PATH%\pki\opxuas\pkiserver\{own,trusted,rejected,issuers}; client …\pki\opxuac\pkiclient\{own,trusted,rejected,deleted,issuers}; dataset OPCUAC_PKI_CERTIFICATES_DF |
Server own ciserveruaserver.der |
| OPC Classic settings | tls\sup\opxsys.sup (tabs Alarm and Event Client, Data Access Server, Alarm & Event Server) |
Defaults; OPXAEC_SAFE_CON NO |
| OPC UA client config | export OPCUAC_LINE_DF, …_STATION_DF, …_SUBSCRIPTION_DF, …_POINT_DF |
Only the sample loopback |
| Logs | %TLS_LOG_PATH%\OPXUAS.log, OpxUas_Sdk*.log, <UA client process>.log |
Fixing the ODBC server (only if ODBC is licensed and wanted; admin): place a certificate and key
with the names above in %TLS_ROOT_PATH%\tls\pki\odbsrv\, or set USESSL = NO in odbsrv.sup
(unencrypted ODBC traffic — a security decision), then restart CI Server.