cancel
Showing results for 
Search instead for 
Did you mean: 

BadCertificatUntrusted : XM21 OPCUA client => ctrlXcore 2.4 OPCUA server :

BadCertificatUntrusted : XM21 OPCUA client => ctrlXcore 2.4 OPCUA server :

Fred74
Established Member

Hello,

I am trying to exchange data between a XM and a ctrlXCore 2.4. XM is OPCUA client with FBs (RIL_OPCUAClient lib) and ctrlXcore has to OPCUA server app running.

When I try to connect I got the error : BadCertificatUntrusted : return Value from the FB Connect

See MLC print screen :

Fred74_0-1711101228256.png

On the ctrlXCore side (web page) : 

I am expecting to see in the ctrlXCore (Certificates&Keys) the new certificate to trust so that I could Trust the communication but nothing is displayed. in this page.

 

Fred74_1-1711101350130.png

How could I in the ctrlXCore trust the connexion ?

 Does anyone have an idea for me ?

thank you

1 REPLY 1

NoRisk4Project
Long-established Member

Which IndraWorks version is used on the XM control?

I just made a quick test with my XM22 (15v20) and my ctrlX CORE and it works as expected. When the PLC OPC UA Client tries to connect I receive a "BadSecurityChecksFailed" error and I find the (rejected) certificate of the PLC OPC UA client inside the OPC UA server certificates.

2024-03-22_16h09_55.png

But, I'm missing the server certificates inside your screenshot. Did you deleted them on the ctrlX?

If you deleted them, please restart the ctrlX or at least the OPC UA server, to generate new server certificates. Please check and set the date/time inside the ctrlX before restarting, because the actual time stamp is used for the certificates (valid from/to settings).

You also set "CheckServerCertificate" to "true" 

2024-03-22_16h33_51.png

So please check also the time of the XM control. I could reproduce your error by setting the time inside my XM22 back to a time where the OPC UA server certificates are not yet valid (in my case they are valid from 2024-03-12 10:22:12 and I set the date/time inside the XM back to 2024-02-12). The OPC UA client checks the server certificate (as configured) and refuses the certificate because it's not yet valid.

After I set the time inside my XM22 correct again, I deleted my server certificates. I also get the "BadCertificateUntrusted" error inside the PLC, because there is nothing to check (as configured) and the connection is refused by the PLC OPC UA client.

Referring to your screenshot, I guess this is your problem. Please check also date/time of both controls to avoid other issues.

Icon--AD-black-48x48Icon--address-consumer-data-black-48x48Icon--appointment-black-48x48Icon--back-left-black-48x48Icon--calendar-black-48x48Icon--center-alignedIcon--Checkbox-checkIcon--clock-black-48x48Icon--close-black-48x48Icon--compare-black-48x48Icon--confirmation-black-48x48Icon--dealer-details-black-48x48Icon--delete-black-48x48Icon--delivery-black-48x48Icon--down-black-48x48Icon--download-black-48x48Ic-OverlayAlertIcon--externallink-black-48x48Icon-Filledforward-right_adjustedIcon--grid-view-black-48x48IC_gd_Check-Circle170821_Icons_Community170823_Bosch_Icons170823_Bosch_Icons170821_Icons_CommunityIC-logout170821_Icons_Community170825_Bosch_Icons170821_Icons_CommunityIC-shopping-cart2170821_Icons_CommunityIC-upIC_UserIcon--imageIcon--info-i-black-48x48Icon--left-alignedIcon--Less-minimize-black-48x48Icon-FilledIcon--List-Check-grennIcon--List-Check-blackIcon--List-Cross-blackIcon--list-view-mobile-black-48x48Icon--list-view-black-48x48Icon--More-Maximize-black-48x48Icon--my-product-black-48x48Icon--newsletter-black-48x48Icon--payment-black-48x48Icon--print-black-48x48Icon--promotion-black-48x48Icon--registration-black-48x48Icon--Reset-black-48x48Icon--right-alignedshare-circle1Icon--share-black-48x48Icon--shopping-bag-black-48x48Icon-shopping-cartIcon--start-play-black-48x48Icon--store-locator-black-48x48Ic-OverlayAlertIcon--summary-black-48x48tumblrIcon-FilledvineIc-OverlayAlertwhishlist