OMRON NJ501, NX102, NX701 User Manual

Machine Automation Controller

NJ/NX-series

CPU Unit
OPC UA

User’s Manual

NJ501-100
NX102-
NX701-1

W588-E1-04

NOTE

All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in
any form, or by any means, mechanical, electronic, photocopying, recording, or otherwise, without the prior
written permission of OMRON.

No patent liability is assumed with respect to the use of the information contained herein. Moreover, because
OMRON is constantly striving to improve its high-quality products, the information contained in this manual is
subject to change without notice. Every precaution has been taken in the preparation of this manual. Neverthe­less, OMRON assumes no responsibility for errors or omissions. Neither is any liability assumed for damages
resulting from the use of the information contained in this publication.

Trademarks

• Sysmac and SYSMAC are trademarks or registered trademarks of OMRON Corporation in Japan and other
countries for OMRON factory automation products.

• Microsoft, Windows, Excel, and Visual Basic are either registered trademarks or trademarks of Microsoft Corpora­tion in the United States and other countries.

• EtherCAT® is registered trademark and patented technology, licensed by Beckhoff Automation GmbH, Germany.

• ODVA, CIP, CompoNet, DeviceNet, and EtherNet/IP are trademarks of ODVA.

• The SD and SDHC logos are trademarks of SD-3C, LLC.

Other company names and product names in this document are the trademarks or registered trademarks of their
respective companies.

Copyrights

Microsoft product screen shots reprinted with permission from Microsoft Corporation.

Introduction

Thank you for purchasing an NJ/NX-series CPU Unit.
This manual contains information that is necessary to use the OPC UA with the NJ/NX-series CPU
Unit. Please read this manual and make sure you understand the functionality and performance of the
NJ/NX-series CPU Unit before you attempt to use it in a control system.
Keep this manual in a safe place where it will be available for reference during operation.

Intended Audience

This manual is intended for the following personnel, who must also have knowledge of electrical sys­tems (an electrical engineer or the equivalent).

• Personnel in charge of introducing FA systems.

• Personnel in charge of designing FA systems.

• Personnel in charge of installing and maintaining FA systems.

• Personnel in charge of managing FA systems and facilities.

For programming, this manual is intended for personnel who understand the programming language
specifications in international standard IEC 61131-3 or Japanese standard JIS B 3503.

Introduction

Applicable Products

This manual covers the following products.

• NJ-series CPU Units NJ501-100 (Unit version 1.17 or later)

• NX-series CPU Units NX102- (Unit version 1.30 or later)

• NX-series CPU Units NX701-1 (Unit version 1.24 or later)

• Sysmac Studio SYSMAC-SE2

(NJ501-100: version 1.21 or higher, NX102-00: version 1.23 or higher,
NX102-20: version 1.24 or higher, NX701-1: version 1.44 or higher)

Part of the specifications and restrictions for the CPU Units are given in other manuals. Refer to Rele-
vant Manuals on page 2 and Related Manuals on page 17.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1

Relevant Manuals

Relevant Manuals

The following table provides the relevant manuals for the NJ/NX-series CPU Units.
Read all of the manuals that are relevant to your system configuration and application before you use
the NJ/NX-series CPU Unit.

The built-in EtherNet/IP port in the NJ/NX-series CPU Unit is used for this product.
For details on how to use the built-in EtherNet/IP port, refer to the NJ/NX-series CPU Unit Built-in Eth-
erNet/IP Port User’s Manual (Cat. No. W506)

Most operations are performed from the Sysmac Studio Automation Software. Refer to the Sysmac Stu-
dio Version 1 Operation Manual (Cat. No. W504) for information on the Sysmac Studio.

NX-series CPU Unit

Hardware User’s

Manual

Purpose of use

Manual

Basic information

NX-series NX102 CPU

Unit Hardware User’s

NJ-series CPU Unit

Hardware User’s

Manual

Manual

NJ/NX-series CPU Unit

Software User’s Manual

NJ/NX-series

Instructions Reference

Manual

NJ/NX-series CPU Unit

Motion Control User’s

Manual

NJ/NX-series Motion

Control Instructions

Reference Manual

User’s Manual

NJ/NX-series CPU Unit

Built-in EtherCAT Port

NJ/NX-series CPU Unit

Built-in EtherNet/IP Port

User’s Manual

NJ-series CPU Unit

OPC UA User’s Manual

NJ/NX-series

Troubleshooting

Manual

Introduction to NX701 CPU Units 

Introduction to NX102 CPU Units 

Introduction to NJ-series Controllers 

Setting devices and hardware

Using motion control 

Using EtherCAT 

Using EtherNet/IP 

Software settings

Using motion control 

Using EtherCAT 

Using EtherNet/IP 

Using OPC UA 

Writing the user program

Using motion control 

Using EtherCAT 

Using EtherNet/IP 

Programming error processing 

Using OPC UA 

Testing operation and debugging

Using motion control 

Using EtherCAT 

Using EtherNet/IP 

Using OPC UA 

Learning about error management and

corrections

Maintenance

*1

Using motion control 

Using EtherCAT 

Using EtherNet/IP 









   



*1 Refer to the NJ/NX-series Troubleshooting Manual (Cat. No. W503) for the error management concepts and an overview

of the error items. Refer to the manuals that are indicated with triangles for details on errors for the corresponding Units.

2

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Manual Structure

4-9

4 Installation and Wiring

NJ-series CPU Unit Hardware User’s Manual (W500)

stinU gnitnuoM 3-4

4

stnenopmoC rellortnoC gnitcennoC 1-3-4

4-3 Mounting Units

The Units that make up an NJ-series Controller can be connected simply by pressing the Units together
and locking the sliders by moving them toward the back of the Units. The End Cover is connected in the
same way to the Unit on the far right side of the Controller.

1 Join the Units so that the connectors fit exactly.

2 The yellow sliders at the top and bottom of each Unit lock the Units together. Move the sliders

toward the back of the Units as shown below until they click into place.

Precautions for Correct UsePrecautions for Correct Use

4-3-1 Connecting Controller Components

Connector

Hook

Hook holes

Slider

Lock

Release

Move the sliders toward the back
until they lock into place.

Level 1 heading
Level 2 heading
Level 3 heading

Level 2 heading

A step in a procedure

Manual name

Special information

Level 3 heading

Page tab

Gives the current
headings.

Indicates a procedure.

Icons indicate
precautions, additional
information, or reference
information.

Gives the number
of the main section.

This illustration is provided only as a sample. It may not literally appear in this manual.

The sliders on the tops and bottoms of the Power Supply Unit, CPU Unit, I/O Units, Special I/O
Units, and CPU Bus Units must be completely locked (until they click into place) after connecting
the adjacent Unit connectors.

Page Structure

The following page structure is used in this manual.

Manual Structure

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

3

Manual Structure

Special Information

Special information in this manual is classified as follows:

Precautions for Safe Use

Precautions on what to do and what not to do to ensure safe usage of the product.

Precautions for Correct Use

Precautions on what to do and what not to do to ensure proper operation and performance.

Additional Information

Additional information to read as required.
This information is provided to increase understanding or make operation easier.

Version Information

Information on differences in specifications and functionality for CPU Units with different unit versions
and for different versions of the Sysmac Studio is given.

Note References are provided to more detailed or related information.

Precaution on Terminology

• In this manual, built-in EtherNet/IP port refers to the following port.

- Built-in EtherNet/IP port of the NJ-series CPU Units NJ501-100

- Built-in EtherNet/IP port (PORT 1) of the NX-series CPU Units NX102-

- Built-in EtherNet/IP port (PORT 1) of the NX-series CPU Units NX701-1

• In this manual, download refers to transferring data from the Sysmac Studio to the physical Controller
and upload refers to transferring data from the physical Controller to the Sysmac Studio.
For the Sysmac Studio, synchronization is used to both upload and download data. Here, synchro-
nize means to automatically compare the data for the Sysmac Studio on the computer with the data
in the physical Controller and transfer the data in the direction that is specified by the user.

4

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Sections in this Manual

1A

I2

3

4

5

6

7

8

9

1A

I2

3

4

5

6

7

8

9

Overview of OPC UA
Server Function

Structure of the OPC
UA Server

Appendices

Index

Settings of the OPC UA Server

Starting and Checking the Status of
the OPC UA Server

Security Function of OPC UA Server

Execution Log Functions

Connecting from the OPC UA Client and
Reading/Writing Variables

Other Functions

Troubleshooting

Sections in this Manual

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

5

CONTENTS

CONTENTS

Introduction ...............................................................................................................1

Relevant Manuals......................................................................................................2

Manual Structure.......................................................................................................3

Sections in this Manual ............................................................................................5

Terms and Conditions Agreement .........................................................................10

Safety Precaution.................................................................................................... 12

Precautions for Safe Use........................................................................................13

Precautions for Correct Use...................................................................................14

Regulations and Standards....................................................................................15

Versions ...................................................................................................................16

Related Manuals...................................................................................................... 17

Terminology.............................................................................................................19

Revision History...................................................................................................... 21

Section 1 Overview of OPC UA Server Function

1-1 Overview and Features ........................................................................................................... 1-2

1-1-1 Overview .....................................................................................................................................1-2

1-1-2 System Configuration..................................................................................................................1-2

1-1-3 Features...................................................................................................................................... 1-2

1-2 Specifications .......................................................................................................................... 1-4

1-2-1 List of Supported CPU Units .......................................................................................................1-4

1-2-2 Function Specifications ...............................................................................................................1-5

1-3 OPC UA Server Procedures.................................................................................................... 1-7

1-3-1 Overall Procedure ....................................................................................................................... 1-7

1-3-2 Procedure Details........................................................................................................................ 1-8

Section 2 Structure of the OPC UA Server

2-1 Internal Structure of the Overall OPC UA Communications System.................................. 2-2

2-1-1 Overview .....................................................................................................................................2-2

2-1-2 Details .........................................................................................................................................2-3

2-2 Overview of the Security Function of the OPC UA Server................................................... 2-5

Section 3 Settings of the OPC UA Server

3-1 Controller Setup ...................................................................................................................... 3-2

3-1-1 IP Address Settings of the Built-in EtherNet/IP Port....................................................................3-2

6

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

CONTENTS

3-2 OPC UA Settings...................................................................................................................... 3-3

3-2-1 Overview of OPC UA Settings .................................................................................................... 3-3

3-2-2 OPC UA Server Settings............................................................................................................. 3-7

3-2-3 When necessary to cycle the power supply to the Controller or reset the Controller ............... 3-10

3-2-4 Automatic Generation of the Server Certificate ........................................................................ 3-10

3-2-5 Setting and Displaying the Certificate........................................................................................3-11

3-2-6 Security Settings....................................................................................................................... 3-22

3-2-7 Server Status............................................................................................................................ 3-25

3-2-8 Displaying the Operation Logs.................................................................................................. 3-25

3-2-9 Operations for the OPC UA Settings ........................................................................................ 3-26

3-3 Creating Variables for OPC UA Communications .............................................................. 3-27

3-3-1 Global Variables Published to OPC UA Communications ........................................................ 3-27

3-3-2 Adding or Deleting Network-published Variables...................................................................... 3-28

Section 4 Starting and Checking the Status of the OPC UA Server

4-1 Starting or Stopping the OPC UA Server .............................................................................. 4-2

4-1-1 How to Start or Stop the OPC UA Server ................................................................................... 4-2

4-1-2 Conditions under Which the OPC UA Server Cannot be Started ............................................... 4-3

4-1-3 Conditions under Which the OPC UA Server Stops ................................................................... 4-3

4-1-4 Operation of the OPC UA Service Function in each State of the CPU Unit................................ 4-4

4-2 Checking the Status of the OPC UA Server .......................................................................... 4-5

4-2-1 Checking Based on OPC UA Server Status of the Sysmac Studio ............................................ 4-5

4-2-2 Checking Based on the Event Log ............................................................................................. 4-7

4-2-3 Checking Based on the Execution Log....................................................................................... 4-7

4-2-4 Operating Status of the OPC UA Server..................................................................................... 4-7

4-2-5 Conditions for Reconfiguring the OPC UA Server ...................................................................... 4-9

Section 5 Security Function of OPC UA Server

5-1 Details of the Connection Authentication Function of the OPC UA Server ....................... 5-2

5-1-1 Application Authentication........................................................................................................... 5-2

5-1-2 User Authentication..................................................................................................................... 5-5

5-2 Details of the Message Security Function ............................................................................ 5-7

5-2-1 Signature and Encryption ........................................................................................................... 5-7

5-2-2 OPC UA Security Mode and Policy............................................................................................. 5-7

Section 6 Connecting from the OPC UA Client and

Reading/Writing Variables

6-1 Connecting from the OPC UA Client...................................................................................... 6-2

6-1-1 Specifying the URL of the Target OPC UA Server...................................................................... 6-2

6-1-2 Connecting to the Target OPC UA Server .................................................................................. 6-2

6-2 Reading/Writing Variables from the OPC UA Client ............................................................. 6-3

6-2-1 Address Space of the NJ/NX-series Controller........................................................................... 6-3

6-2-2 Reading/Writing the Variables of the CPU Unit .......................................................................... 6-5

Section 7 Execution Log Functions

7-1 Execution Logs........................................................................................................................ 7-2

7-1-1 Overview..................................................................................................................................... 7-2

7-1-2 How to Use the Execution Log ................................................................................................... 7-4

7-1-3 Setting the Execution Log........................................................................................................... 7-4

7-1-4 Checking the Execution Log....................................................................................................... 7-4

7-1-5 Execution Log File Specifications............................................................................................... 7-5

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

7

CONTENTS

7-1-6 Format of Records ......................................................................................................................7-5

7-1-7 Examples of Records in Execution Log File.............................................................................. 7-11

7-2 Checking the Execution Log ................................................................................................ 7-13

7-2-1 How to Check the Execution Log..............................................................................................7-13

7-2-2 Checking Logs in the Operation Log Window in the Sysmac Studio ........................................7-13

7-2-3 Checking Logs with the SD Memory Card ................................................................................7-16

7-2-4 Checking Logs by Using FTP Client Software ..........................................................................7-16

7-3 OPC UA Server Shutdown Function .................................................................................... 7-17

7-3-1 Overview ...................................................................................................................................7-17

7-3-2 Shutdown System ..................................................................................................................... 7-17

7-3-3 How to Execute the Shutdown Function ...................................................................................7-18

7-3-4 How to Check the Shutdown of the OPC UA Server.................................................................7-18

7-4 SD Memory Card Operations................................................................................................ 7-19

7-4-1 Conditions for Saving Execution Log Files to the SD Memory Card......................................... 7-19

7-4-2 Directories Used for the OPC UA Server ..................................................................................7-19

7-4-3 Execution Log Operation when Replacing the SD Memory Card .............................................7-20

7-4-4 Approximate Work Time for SD Memory Card Replacement....................................................7-20

7-4-5 Replacement Timing of SD Memory Card.................................................................................7-20

Section 8 Other Functions

8-1 The Sysmac Studio Operation Authority Verification Related to the OPC UA Server ...... 8-2

8-2 Backup and Restore Functions Related to the OPC UA Server.......................................... 8-4

8-2-1 Backup Function ......................................................................................................................... 8-5

8-2-2 Restoration and Verification ........................................................................................................8-6

8-2-3 Compatibility between Backup-related Files ...............................................................................8-7

8-2-4 How to Replace the CPU Unit in Relation to the OPC UA Server............................................... 8-8

8-3 Clear All Memory Function Related to the OPC UA Server ................................................. 8-9

Section 9 Troubleshooting

9-1 Overview of Troubleshooting ................................................................................................. 9-2

Section A Appendices

A-1 Task Design Procedure ...........................................................................................................A-2

A-1-1 Startup Time of the OPC UA Server (Reference Values)............................................................A-2

A-1-2 Guidelines for System Service Execution Time Ratio.................................................................A-5

A-1-3 Checking the System Service Execution Time Ratio ..................................................................A-7

A-2 OPC UA Instruction .................................................................................................................A-9

A-2-1 OPCUA_Shutdown (Shutdown OPC UA Function).....................................................................A-9

A-2-2 Variables .....................................................................................................................................A-9

A-2-3 Related System-defined Variables............................................................................................A-10

A-2-4 Related Error Codes .................................................................................................................A-10

A-2-5 Function ....................................................................................................................................A-10

A-2-6 Precautions for Correct Use......................................................................................................A-10

A-2-7 Additional Information ...............................................................................................................A-11

A-2-8 Sample Programming ...............................................................................................................A-11

A-3 When CA-signed Client Certificates Supported .................................................................A-13

A-3-1 Overview ...................................................................................................................................A-13

A-3-2 Settings .....................................................................................................................................A-14

A-3-3 Related Operations Performed from OPC UA Settings in the Sysmac Studio..........................A-14

A-4 List of Related System-defined Variables ...........................................................................A-18

A-4-1 System-defined Variables for the Overall NJ/NX-series Controller (No Category) ...................A-18

A-5 Version Information...............................................................................................................A-19

8

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

CONTENTS

Index

A-5-1 Relationship between Unit Versions and OPC UA Standard Versions ..................................... A-19

A-5-2 Relationship between Unit Versions and the Sysmac Studio Versions ....................................A-19

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

9

Terms and Conditions Agreement

Terms and Conditions Agreement

Warranty, Limitations of Liability

Warranties

 Exclusive Warranty

Omron’s exclusive warranty is that the Products will be free from defects in materials and workman­ship for a period of twelve months from the date of sale by Omron (or such other period expressed in
writing by Omron). Omron disclaims all other warranties, express or implied.

 Limitations

OMRON MAKES NO WARRANTY OR REPRESENTATION, EXPRESS OR IMPLIED, ABOUT
NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OF
THE PRODUCTS. BUYER ACKNOWLEDGES THAT IT ALONE HAS DETERMINED THAT THE
PRODUCTS WILL SUITABLY MEET THE REQUIREMENTS OF THEIR INTENDED USE.

Omron further disclaims all warranties and responsibility of any type for claims or expenses based
on infringement by the Products or otherwise of any intellectual property right.

 Buyer Remedy

Omron’s sole obligation hereunder shall be, at Omron’s election, to (i) replace (in the form originally
shipped with Buyer responsible for labor charges for removal or replacement thereof) the non-com­plying Product, (ii) repair the non-complying Product, or (iii) repay or credit Buyer an amount equal
to the purchase price of the non-complying Product; provided that in no event shall Omron be
responsible for warranty, repair, indemnity or any other claims or expenses regarding the Products
unless Omron’s analysis confirms that the Products were properly handled, stored, installed and
maintained and not subject to contamination, abuse, misuse or inappropriate modification. Return of
any Products by Buyer must be approved in writing by Omron before shipment. Omron Companies
shall not be liable for the suitability or unsuitability or the results from the use of Products in combi­nation with any electrical or electronic components, circuits, system assemblies or any other materi­als or substances or environments. Any advice, recommendations or information given orally or in
writing, are not to be construed as an amendment or addition to the above warranty.

See http://www.omron.com/global/ or contact your Omron representative for published information.

Limitation on Liability; Etc

OMRON COMPANIES SHALL NOT BE LIABLE FOR SPECIAL, INDIRECT, INCIDENTAL, OR CON­SEQUENTIAL DAMAGES, LOSS OF PROFITS OR PRODUCTION OR COMMERCIAL LOSS IN ANY
WAY CONNECTED WITH THE PRODUCTS, WHETHER SUCH CLAIM IS BASED IN CONTRACT,
WARRANTY, NEGLIGENCE OR STRICT LIABILITY.

Further, in no event shall liability of Omron Companies exceed the individual price of the Product on
which liability is asserted.

10

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Application Considerations

Suitability of Use

Omron Companies shall not be responsible for conformity with any standards, codes or regulations
which apply to the combination of the Product in the Buyer’s application or use of the Product. At
Buyer’s request, Omron will provide applicable third party certification documents identifying ratings
and limitations of use which apply to the Product. This information by itself is not sufficient for a com­plete determination of the suitability of the Product in combination with the end product, machine, sys­tem, or other application or use. Buyer shall be solely responsible for determining appropriateness of
the particular Product with respect to Buyer’s application, product or system. Buyer shall take applica­tion responsibility in all cases.

NEVER USE THE PRODUCT FOR AN APPLICATION INVOLVING SERIOUS RISK TO LIFE OR
PROPERTY OR IN LARGE QUANTITIES WITHOUT ENSURING THAT THE SYSTEM AS A WHOLE
HAS BEEN DESIGNED TO ADDRESS THE RISKS, AND THAT THE OMRON PRODUCT(S) IS
PROPERLY RATED AND INSTALLED FOR THE INTENDED USE WITHIN THE OVERALL EQUIP­MENT OR SYSTEM.

Terms and Conditions Agreement

Programmable Products

Omron Companies shall not be responsible for the user’s programming of a programmable Product, or
any consequence thereof.

Disclaimers

Performance Data

Data presented in Omron Company websites, catalogs and other materials is provided as a guide for
the user in determining suitability and does not constitute a warranty. It may represent the result of
Omron’s test conditions, and the user must correlate it to actual application requirements. Actual perfor­mance is subject to the Omron’s Warranty and Limitations of Liability.

Change in Specifications

Product specifications and accessories may be changed at any time based on improvements and other
reasons. It is our practice to change part numbers when published ratings or features are changed, or
when significant construction changes are made. However, some specifications of the Product may be
changed without any notice. When in doubt, special part numbers may be assigned to fix or establish
key specifications for your application. Please consult with your Omron’s representative at any time to
confirm actual specifications of purchased Product.

Errors and Omissions

Information presented by Omron Companies has been checked and is believed to be accurate; how­ever, no responsibility is assumed for clerical, typographical or proofreading errors or omissions.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

11

Safety Precaution

Safety Precaution

Refer to the following manuals for safety precautions.

• NX-series CPU Unit Hardware User’s Manual (Cat. No. W535)

• NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

• NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

• Sysmac Studio Version 1 Operation Manual (Cat. No. W504)

12

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Precautions for Safe Use

This section describes the precautions for the safe use of the OPC UA Server.

• Even if you accidentally add the client certificate of a client for which you do not want to permit con­nection in the Trusted Certificate List, the OPC UA Server of the NJ/NX-series Controller will permit
connections from that client.

As a result, confidential information on the server side may be leaked or unintended operation may
be performed. Therefore, when you add a certificate to the Trusted Certificate List from the Sysmac
Studio, make sure that all the certificates that you will register in the Trusted Certificate List are
trusted client certificates.

• Even if a global variable is set to Network Publish in the Sysmac Studio, the OPC UA client may not
be able to refer to or read/write the variable in some cases depending on the limits sets on variables
that can be published to the OPC UA client.

Refer to the event log or Execution Log, and review the variables to be published to the network
depending on the cause of occurrence. For details on the restrictions on variables that can be pub­lished in the OPC UA client, refer to Restrictions on Publishing to the OPC UA Client on page 6-8 in
6-2-2 Reading/Writing the Variables of the CPU Unit on page 6-5.

Precautions for Safe Use

Refer to the following manuals for other precautions for safe use that are not described above.

• NX-series CPU Unit Hardware User's Manual (Cat. No. W535)

• NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

• NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

• Sysmac Studio Version 1 Operation Manual (Cat. No. W504)

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

13

Precautions for Correct Use

Precautions for Correct Use

This section describes the precautions for the correct use of the OPC UA Server.

• If the IP address of the built-in EtherNet/IP port is changed after starting the use of the OPC UA
Server, the OPC UA server certificate in the CPU Unit will be disabled, and it will not be possible to
communicate with the OPC UA client. In that case, manually regenerate the server certificate, or set
the IP address back to the original address.

• The server certificate is not applied for backup and restore because it is information belonging to indi­vidual CPU Units. If you replace the CPU Unit hardware, you cannot use the same server certificate
for the new CPU Unit after the replacement.

Even if you set the IP address of the built-in EtherNet IP port to the same value as the one for the
previous CPU Unit, be sure to export the server certificate of the new CPU Unit and then perform
installation again on the OPC UA clients.

• Even in cases where you recreate the server certificate by changing the IP address in the same CPU
Unit, make sure to export the server certificate of the CPU Unit and install it at the OPC UA client
side.

• The OPC UA Server is executed as a system service.

Accordingly, if other system services are executed while the OPC UA Server is starting up, they may
take longer.

Moreover, if the system service execution time ratio is less (if it is below approx. 20%, as a refer­ence), the response to the requests from the OPC UA client will be delayed. In such a case, design
the task so that the system service execution time ratio increases.

Refer to the following manuals for other precautions for correct use that are not described above.

• NX-series CPU Unit Hardware User’s Manual (Cat. No. W535)

• NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

• NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

• Sysmac Studio Version 1 Operation Manual (Cat. No. W504)

14

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Regulations and Standards

Refer to the following manuals for regulations and standards.

• NX-series CPU Unit Hardware User’s Manual (Cat. No. W535)

• NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

• NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

Software Licenses and Copyrights

This product incorporates the following third party software. The license and copyright information
associated with this software is available at http://www.fa.omron.co.jp/nj_info_e/.

OpenSSL

This product includes software developed by the OpenSSL Project for use

Regulations and Standards

in the OpenSSL Toolkit

(http://www.openssl.org/).

Copyright (C) 1995-1998 Eric Young ([e-mail]) All rights reserved.

This product includes cryptographic software written by Eric Young

([e-mail])

This Windows version of this product includes software written by Tim

Hudson ([e-mail])

LibXML2

This product includes code that was developed for the XML toolkit from

the GNOME project

(http://xmlsoft.org/).

Copyright (C) 1998-2003 Daniel Veillard. All Rights Reserved.

OPC UA

This product includes code that was developed by Unified Automation GmbH for the OPC UA SDK
(http://www.unifiedautomation.com/).

Copyright (C) 2008-2017 Unified Automation GmbH. All Rights Reserved.

The OPC UA SDK is based in part on <OPC UA Ansi C Stack> of the OPC Foundation. Initial version of
<OPC UA Ansi C Stack> was founded and copyrighted by OPC Foundation,Inc. Copyright (C)
2008,2014 OPC Foundation, Inc., All Rights Reserved.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

15

Versions

Versions

Hardware revisions and unit versions are used to manage the hardware and software in the NJ/NX­series Units and EtherCAT slaves. The hardware revision or unit version is updated each time there is a
change in hardware or software specifications. Even when two Units or EtherCAT slaves have the
same model number, they will have functional or performance differences if they have different hard­ware revisions or unit versions.

Refer to the following manuals for versions.

• NX-series CPU Unit Hardware User’s Manual (Cat. No. W535)

• NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

• NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

Unit Versions of CPU Units and the Sysmac Studio Versions

The functions that are supported depend on the unit version of the NJ/NX-series CPU Unit. The version
of the Sysmac Studio that supports the functions that were added for an upgrade is also required to use
those functions.

Refer to
Units and the Sysmac Studio versions, and for the functions that are supported by each unit version.

A-5 Version Information

on page A-19 for the relationship between the unit versions of the CPU

16

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Related Manuals

The followings are the manuals related to this manual. Use these manuals for reference.

Manual name Cat. No. Model numbers Application Description

NJ-series CPU Unit OPC
UA User's Manual (This
manual)

NJ/NX-series CPU Unit

Built-in EtherNet/IP
User’s Manual

NX-series CPU Unit
Hardware User’s Manual

NJ-series CPU Unit
Hardware User’s Manual

NX-series NX102 CPU
Unit Hardware User’s
Manual

NJ/NX-series CPU Unit
Software User’s Manual

NJ/NX-series Instruc­tions Reference Manual

NJ/NX-series Trouble­shooting Manual



W588 NJ501-100

NX102-
NX701-

W506 NX701-

Port

W535 NX701-

W500 NJ501-

W593 NX102- Learning the basic specifi-

W501 NX701-

W502 NX701-

W503 NX701-

NX102-
NX1P2-
NJ501-
NJ301-
NJ101-

NJ301-
NJ101-

NX102-
NX1P2-
NJ501-
NJ301-
NJ101-

NX102-
NX1P2-
NJ501-



NJ301-
NJ101-

NX102-
NX1P2-
NJ501-
NJ301-
NJ101-

Using the OPC UA with the
NJ-series CPU Unit.

Using the built-in Ether­Net/IP port on an NJ/NX­series CPU Unit.

Learning the basic
specifications of the NX701
CPU Units, including
introductory information,
designing, installation, and
maintenance.
Mainly hardware
information is provided.

Learning the basic specifi­cations of the NJ-series
CPU Units, including intro­ductory information, design­ing, installation, and
maintenance. Mainly hard­ware information is pro­vided.

cations of the NX102 CPU
Units, including introductory
information, designing,
installation, and mainte­nance.

Mainly hardware informa­tion is provided.

Learning how to program
and set up an NJ/NX-series
CPU Unit. Mainly software
information is provided.

Learning detailed specifica­tions on the basic instruc­tions of an NJ/NX-series
CPU Unit.




Learning about the errors
that may be detected in an
NJ/NX-series Controller.

Information on the OPC UA is provided.

Information on the built-in EtherNet/IP port is pro­vided. Information is provided on the basic setup,
tag data links, and other features.

An introduction to the entire NX701 system
is provided along with the following information
on the CPU Unit.

• Features and system configuration

• Introduction

• Part names and functions

• General specifications

• Installation and wiring

• Maintenance and inspection

An introduction to the entire NJ-series system is
provided along with the following information on
the CPU Unit.

• Features and system configuration

• Introduction

• Part names and functions

• General specifications

• Installation and wiring

• Maintenance and inspection

An introduction to the entire NX102 system is pro­vided along with the following information on the
CPU Unit.

• Features and system configuration

• Introduction

• Part names and functions

• General specifications

• Installation and wiring

• Maintenance and inspection

The following information is provided on a Control­ler built with an NJ/NX-series CPU Unit.

• CPU Unit operation

• CPU Unit features

• Initial settings

• Programming based on IEC 61131-3 language
specifications

The instructions in the instruction set (IEC 61131-3
specifications) are described.

Concepts on managing errors that may be
detected in an NJ/NX-series Controller and infor­mation on individual errors are described.

Related Manuals

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

17

Related Manuals

Manual name Cat. No. Model numbers Application Description

Sysmac Studio Version 1
Operation Manual

W504 SYSMAC-

SE2

Learning about the operat­ing procedures and func­tions of the Sysmac Studio.

Describes the operating procedures of the Sys­mac Studio.

18

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Terminology

Terminology

This section provides definitions of terms related to the OPC UA.

Term Description

Address space A collection of information that visualizes the OPC UA server with respect to the

OPC UA client.

By referencing this information, the OPC UA client can use the objects of the OPC
UA server and their related information.

Application authentication The authentication of each other’s identity by the server and the OPC UA client

through the exchange of the mutual X.509 digital certificates during the establish-

ment of a connection from the OPC UA client to the server.
Certificate Authority Organization that issues certificates.
Client authentication Indicates the direct authentication of client certificates.

• Authentication of a self-signed client certificate is performed depending on
whether it is present in the trusted certificate list.

• Authentication of a CA-signed client certificate is performed by checking the trust
and revocation of the signed CA certificate.

Client certificate An X.509 digital certificate that certifies the OPC UA client.

It is generated and managed by the OPC UA client in combination with the private
key of the certificate.

In the NJ/NX-series, it is necessary to register the client certificate in the CPU Unit
by the Sysmac Studio.

End point The physical address that can be used on the OPC UA communications network

used by the OPC UA client to access the OPC UA server. Specifically, the following
address:

opc.tcp:// [IPAddress]-[Port]

In the case of the OPC UA Server, the default address is:

opc.tcp://192.168.250.1:4840/

Event A phenomenon that occurs in an unplanned and irregular manner in the NJ/NX-

series Controllers.

Event log A log for recognizing and recording the events that have occurred in the entire Con-

troller. It is recorded in the CPU Unit.

In the OPC UA Server, it indicates the errors and various states of the OPC UA
Server.

Execution log A log for recording the execution state of the OPC UA Server. It is saved in an SD

Memory Card (sold separately).

As compared to the event log, the execution log has a higher capacity and includes
the access results from the OPC UA client to the variables.

In view of future functional expansion, this Execution Log is considered as one of
the types in the leading concept of the Operation log in the Sysmac Studio.

Issuer authentication Indicates the authentication by the certificate authority itself that has signed the cli-

ent certificate.

Authentication of a CA-signed client certificate is performed by checking the trust
and revocation of the certificate of the certificate authority itself.

Message The data unit that expresses the requests or responses of the OPC UA server

transmitted between the OPC UA client and the server.
Node The basic component of the address space.
OPC UA A protocol for communications between industrial devices that is independent of

the manufacturer and platform, and is safe with a high reliability. It has an architec-

ture in which the conventional OPC (Object Linking and Embedding for Process

Control) has been generalized and widened in scope.
OPC UA client An application or computer that supports the OPC UA and issues a service request

to the OPC UA server. Specifically, the main entity of communications, such as the

SCADA and MES.
OPC UA instruction Indicates instructions related to the OPC UA Server.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

19

Terminology

Term Description

OPC UA security mode Setting the encryption and signature of messages in the security-related settings of

messages in the OPC UA.

OPC UA security policy Specification of algorithms such as signatures and encryption in the security-related

settings of messages in the OPC UA.

OPC UA security profile A common name for the client certificate, CA certificate, certificate revocation list,

and security settings.

OPC UA Server A communications service that provides the function of connecting to the OPC UA

client in the NJ/NX-series. It is executed in a system service within the processing
of the CPU Unit.

OPC UA server Main entity of communications, such as an application, computer, or controller that

supports the OPC UA, executes a service in response to a service request from the
OPC UA client, and also sends a response.

Rejected certificate list A list of client certificates that have been rejected at the server side in application

authentication.

Server certificate An X.509 digital certificate that certifies the OPC UA server.

It is generated and managed by the OPC UA server in combination with the private
key of the certificate.

In the NJ/NX-series, it indicates the self-certificate that certifies an individual CPU

Unit as an OPC UA server. It is different for each serial number of the CPU Unit.
Security policy A common name for the OPC UA security mode and OPC UA security policy.
Security settings A common name for user authentication settings, anonymous login, and security

policy.
Trusted certificate list A list of certificates of the communications partner that must be trusted in applica-

tion authentication.

There are the following two types of trusted certificate lists at the server side and

the OPC UA client side:

• Trusted certificate list at the server side: A list of client certificates that have been
set to trust the OPC UA client.

• Trusted certificate list at the OPC UA client side: A list of server certificates that
have been set to trust the server.

User authentication The authentication of the identity of the user operating the OPC UA client by the

server during the establishment of a connection from the OPC UA client to the
server.

20

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Revision History

A manual revision code appears as a suffix to the catalog number on the front and back covers of the
manual.

Revision History

Cat. No.

Revision code Date Revised content

01 January 2018 Original production
02 April 2018 Added information on the NX102-.
03 July 2019 Corrected mistakes.
04 January 2021 Added information on the NX701-1.

W588-E1-04

Revision code

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

21

Revision History

22

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Overview of OPC UA Server Func­tion

This section describes an overview of the OPC UA Server function.

1-1 Overview and Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

1-1-1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

1-1-2 System Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

1-1-3 Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

1-2 Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4

1-2-1 List of Supported CPU Units . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4

1-2-2 Function Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5

1-3 OPC UA Server Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7

1-3-1 Overall Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7

1-3-2 Procedure Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8

1

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 - 1

1 Overview of OPC UA Server Function

- SCADA software

- MES etc.

Ethernet network

Built-in EtherNet/IP port

OPC UA Server function

NJ/NX-series CPU Unit

Sysmac Studio

OPC UA Client

Securely connects and reads and writes variables.

OPC UA communications

1-1 Overview and Features

This section describes an overview and features of the OPC UA Server function.

1-1-1 Overview

The OPC UA Server function enables the NJ/NX-series CPU Unit to operate as an OPC UA server.
With this function, OPC UA clients can connect via Ethernet to the built-in EtherNet/IP port of the
NJ/NX-series CPU Unit using the OPC UA communications, and then read and write variables in the
CPU Unit.

The OPC UA communications can simultaneously achieve both addressing security risks and connect­ing with general-purpose methods. Therefore, the OPC UA Server function enables secure data
exchanges between the CPU Unit and host systems such as SCADA or MES compatible OPC UA so
that the host systems can collect manufacturing progress information or issue manufacturing instruc­tions.

1-1-2 System Configuration

The OPC UA Server function supports the following system configuration.

Refer to A-5 Version Information on page A-19 for the Unit version of the CPU Unit and the version of
the Sysmac Studio that can be supported.

1-1-3 Features

The OPC UA Server function has the following features.

Supporting OPC UA Communications as Secure Industrial Standard
Communications

OPC UA communications have the following features.

• A versatile global standard network from discrete control to process control, and from the sensor or
controller level to the host monitoring and management level.

1 - 2

• Also defined as a recommended communications standard of Industrie 4.0 to connect the control net­works in factories to the IT networks.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 Overview of OPC UA Server Function

• Allows full-scale secure information exchange in the industrial system consisting of different devices.

• Allows to expand the visualization of information adapting to the system in the object-based Address
Space.

Providing the Server Function of OPC UA Communications in the
NJ/NX-series Controller

1-1 Overview and Features

The NJ/NX-series OPC UA Server function has the following features.

• It allows the Controller to connect directly to the OPC UA client via Ethernet without relaying the com­puter.

• Since the NJ/NX-series CPU Unit has EtherCAT communications as the lower level network, it
makes it easy to gather sensor and actuator level information on EtherCAT into OPC UA communica­tions as a higher network.

• You can check the operation results of the OPC UA Server function from the event log in the Control­ler and the Execution Log.

1

1-1-3 Features

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 - 3

1 Overview of OPC UA Server Function

1-2 Specifications

This section describes the specifications of the OPC UA Server function.

1-2-1 List of Supported CPU Units

The OPC UA Server is supported by the following CPU Unit models.

CPU Unit Models Unit version

NX701-1600
NX701-1700
NX701-1620
NX701-1720

NJ501-1300
NJ501-1400
NJ501-1500
NX102-9000
NX102-1000
NX102-1100
NX102-1200
NX102-9020
NX102-1020
NX102-1120
NX102-1220

1.24 or later

1.17 or later

1.30 or later

1 - 4

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 Overview of OPC UA Server Function

1-2-2 Function Specifications

Specifications of the OPC UA Server

Item NJ501-100 NX701-1 NX102-

Built-in EtherNet/IP
port on the CPU

Connection ports

OPC UA function Server function
Transport and data encoding UA TCP binary

Supported profile and model

Endpoint URL (Server URL)

Maximum number of sessions (client) 5
Maximum number of monitored items per server 2,000
Maximum number of subscriptions per server 100
Variable type Network variable

Conditions as
a whole net­work-pub­lished

variables

Conditions that can not be published for each net-

work-published variable

OPC UA security mode and policy

Application
authentica­tion

Maximum number of variables that
can be published
Maximum number of value attri­butes that can be published
Maximum number of structure defi-

*1

nitions that can be published

*1

Authentication X.509

Number of certificates that can be
stored

Unit

Note: The OPC UA Server can be used simultaneously with Eth-

erNet/IP communications.

Micro Embedded Device Server Profile

PLCopen Information Model
opc.tcp: // [IP address] : [port number] /

By default, below.

opc.tcp: //192.168.250.1: 4840 /

10,000

10,000

100

• Multidimensional array specified structure

• Structure containing multidimensional array(s) as member(s)

• Structure whose nesting number exceeds three

• Union, and structure containing union(s) as member(s)

• Array whose start number is not 0; e.g., Array[2..5]

• Array whose number of elements exceeds 1024

• Structure whose number of members exceeds 100

• Variable whose size exceeds 1024 bytes
Allowable security methods can be specified from the following

(multiple specifications possible):

• Both signature and encryption required: SignAndEncrypt
Signature and encryption algorithm: Basic256­Sha256/Basic256/Basic128Rsa15
(multiple specifications possible)

• Only signature required: Sign
Signature algorithm: Basic256Sha256/Basic256/Basic128R­sa15 (multiple specifications possible)

• Neither signature nor encryption required

• Trusted certificate: 32

• CA certificate: 32

• Rejected certificate: 32

Built-in EtherNet/IP port (PORT 1) on the
CPU Unit

1-2 Specifications

1

1-2-2 Function Specifications

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 - 5

1 Overview of OPC UA Server Function

Precautions for Correct Use

Item NJ501-100 NX701-1 NX102-

User authen­tication

*1. For details, refer to Restrictions on Publishing to the OPC UA Client on page 6-8.

Method of user authentication

For the NX701-1 CPU Unit and NX102- CPU Unit, there are two built-in
EtherNet/IP ports, PORT 1 and PORT 2. Note that only PORT 1 is the port that supports the
OPC UA Server.

The following can be set:

• User name and Password

• Anonymous

1 - 6

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)