OMRON NJ501, NX102, NX701 User Manual

Machine Automation Controller

NJ/NX-series

CPU Unit

OPC UA

User’s Manual

NJ501-100

NX102-

NX701-1

W588-E1-04

NOTE

All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form, or by any means, mechanical, electronic, photocopying, recording, or otherwise, without the prior written permission of OMRON.

No patent liability is assumed with respect to the use of the information contained herein. Moreover, because OMRON is constantly striving to improve its high-quality products, the information contained in this manual is subject to change without notice. Every precaution has been taken in the preparation of this manual. Nevertheless, OMRON assumes no responsibility for errors or omissions. Neither is any liability assumed for damages resulting from the use of the information contained in this publication.

Trademarks

•Sysmac and SYSMAC are trademarks or registered trademarks of OMRON Corporation in Japan and other countries for OMRON factory automation products.

•Microsoft, Windows, Excel, and Visual Basic are either registered trademarks or trademarks of Microsoft Corporation in the United States and other countries.

•EtherCAT® is registered trademark and patented technology, licensed by Beckhoff Automation GmbH, Germany.

•ODVA, CIP, CompoNet, DeviceNet, and EtherNet/IP are trademarks of ODVA.

•The SD and SDHC logos are trademarks of SD-3C, LLC.

Other company names and product names in this document are the trademarks or registered trademarks of their respective companies.

Copyrights

Microsoft product screen shots reprinted with permission from Microsoft Corporation.

Introduction

Introduction

Thank you for purchasing an NJ/NX-series CPU Unit.

This manual contains information that is necessary to use the OPC UA with the NJ/NX-series CPU Unit. Please read this manual and make sure you understand the functionality and performance of the NJ/NX-series CPU Unit before you attempt to use it in a control system.

Keep this manual in a safe place where it will be available for reference during operation.

Intended Audience

This manual is intended for the following personnel, who must also have knowledge of electrical systems (an electrical engineer or the equivalent).

•Personnel in charge of introducing FA systems.

•Personnel in charge of designing FA systems.

•Personnel in charge of installing and maintaining FA systems.

•Personnel in charge of managing FA systems and facilities.

For programming, this manual is intended for personnel who understand the programming language specifications in international standard IEC 61131-3 or Japanese standard JIS B 3503.

Applicable Products

This manual covers the following products.

•NJ-series CPU Units NJ501-100 (Unit version 1.17 or later)

•NX-series CPU Units NX102- (Unit version 1.30 or later)

•NX-series CPU Units NX701-1 (Unit version 1.24 or later)

•Sysmac Studio SYSMAC-SE2

(NJ501-100: version 1.21 or higher, NX102-00: version 1.23 or higher, NX102-20: version 1.24 or higher, NX701-1: version 1.44 or higher)

Part of the specifications and restrictions for the CPU Units are given in other manuals. Refer to Relevant Manuals on page 2 and Related Manuals on page 17.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1

Relevant Manuals

Relevant Manuals

The following table provides the relevant manuals for the NJ/NX-series CPU Units.

Read all of the manuals that are relevant to your system configuration and application before you use the NJ/NX-series CPU Unit.

The built-in EtherNet/IP port in the NJ/NX-series CPU Unit is used for this product.

For details on how to use the built-in EtherNet/IP port, refer to the NJ/NX-series CPU Unit Built-in EtherNet/IP Port User’s Manual (Cat. No. W506)

Most operations are performed from the Sysmac Studio Automation Software. Refer to the Sysmac Studio Version 1 Operation Manual (Cat. No. W504) for information on the Sysmac Studio.

Manual

Basic information

Purpose of use

<![if ! IE]> <![endif]>Manual

<![if ! IE]> <![endif]>UnitCPUseries-NX User’sHardware

<![if ! IE]> <![endif]>CPUNX102series-NX User’sHardwareUnit Manual

<![if ! IE]> <![endif]>UnitCPUseries-NJ User’sHardware Manual

<![if ! IE]> <![endif]>UnitCPUseries-NJ/NX ManualUser’sSoftware

<![if ! IE]> <![endif]>series-NJ/NX ReferenceInstructions Manual

<![if ! IE]> <![endif]>UnitCPUseries-NJ/NX User’sControlMotion Manual

<![if ! IE]> <![endif]>Motionseries-NJ/NX InstructionsControl ManualReference

<![if ! IE]> <![endif]>UnitCPUseries-NJ/NX PortEtherCATin-Built ManualUser’s

<![if ! IE]> <![endif]>UnitCPUseries-NJ/NX PortEtherNet/IPin-Built ManualUser’s

<![if ! IE]> <![endif]>UnitCPUseries-NJ ManualUser’sUA OPC

<![if ! IE]> <![endif]>series-NJ/NX Troubleshooting Manual

Introduction to NX701 CPU Units



Introduction to NX102 CPU Units



Introduction to NJ-series Controllers



Setting devices and hardware

Using motion control









Using EtherCAT



Using EtherNet/IP



Software settings

Using motion control



Using EtherCAT





Using EtherNet/IP



Using OPC UA



Writing the user program

Using motion control





Using EtherCAT







Using EtherNet/IP



Programming error processing



Using OPC UA



Testing operation and debugging

Using motion control



Using EtherCAT





Using EtherNet/IP



Using OPC UA



Learning about error management and

















corrections*1

Maintenance

Using motion control









Using EtherCAT



Using EtherNet/IP



*1 Refer to the NJ/NX-series Troubleshooting Manual (Cat. No. W503) for the error management concepts and an overview of the error items. Refer to the manuals that are indicated with triangles for details on errors for the corresponding Units.

2	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Manual Structure

Manual Structure

Page Structure

The following page structure is used in this manual.

Level 2 heading

Level 3 heading

A step in a procedure

Indicates a procedure.

Special information

Icons indicate precautions, additional information, or reference information.

4 Installation and Wiring

4-3 Mounting Units

4-3-1 Connecting Controller Components

The Units that make up an NJ-series Controller can be connected simply by pressing the Units together and locking the sliders by moving them toward the back of the Units. The End Cover is connected in the same way to the Unit on the far right side of the Controller.

1 Join the Units so that the connectors fit exactly.

Hook	Hook holes
	Connector

2 The yellow sliders at the top and bottom of each Unit lock the Units together. Move the sliders

toward the back of the Units as shown below until they click into place.

Move the sliders toward the back until they lock into place.

Lock

Release

Slider

Precautions for Correct Use

The sliders on the tops and bottoms of the Power Supply Unit, CPU Unit, I/O Units, Special I/O Units, and CPU Bus Units must be completely locked (until they click into place) after connecting the adjacent Unit connectors.

Manual name

NJ-series CPU Unit Hardware User’s Manual (W500)

4-9

<![if ! IE]>

<![endif]>stinU gnitnuoM 3-4

4

<![if ! IE]>

<![endif]>stnenopmoC rellortnoC gnitcennoC 1-3-4

Level 1 heading

Level 2 heading

Level 3 heading

Gives the current headings.

Page tab

Gives the number of the main section.

This illustration is provided only as a sample. It may not literally appear in this manual.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

3

Manual Structure

Special Information

Special information in this manual is classified as follows:

Precautions for Safe Use

Precautions on what to do and what not to do to ensure safe usage of the product.

Precautions for Correct Use

Precautions on what to do and what not to do to ensure proper operation and performance.

Additional Information

Additional information to read as required.

This information is provided to increase understanding or make operation easier.

Version Information

Information on differences in specifications and functionality for CPU Units with different unit versions and for different versions of the Sysmac Studio is given.

Note References are provided to more detailed or related information.

Precaution on Terminology

•In this manual, built-in EtherNet/IP port refers to the following port.

-Built-in EtherNet/IP port of the NJ-series CPU Units NJ501-100

-Built-in EtherNet/IP port (PORT 1) of the NX-series CPU Units NX102-

-Built-in EtherNet/IP port (PORT 1) of the NX-series CPU Units NX701-1

•In this manual, download refers to transferring data from the Sysmac Studio to the physical Controller and upload refers to transferring data from the physical Controller to the Sysmac Studio.

For the Sysmac Studio, synchronization is used to both upload and download data. Here, synchronize means to automatically compare the data for the Sysmac Studio on the computer with the data in the physical Controller and transfer the data in the direction that is specified by the user.

4	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Sections in this Manual

Sections in this Manual

	1	Overview of OPC UA		A	Appendices
		Server Function
		Structure of the OPC
	2			I	Index
		UA Server
	3	Settings of the OPC UA Server
		Starting and Checking the Status of
	4
		the OPC UA Server
	5	Security Function of OPC UA Server
		Connecting from the OPC UA Client and
	6
		Reading/Writing Variables
	7	Execution Log Functions

1A

2I

3

4

5

6

7

8

9

8	Other Functions

9 Troubleshooting

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

5

CONTENTS

CONTENTS

Introduction ...............................................................................................................	1
Relevant Manuals......................................................................................................	2
Manual Structure.......................................................................................................	3
Sections in this Manual ............................................................................................	5
Terms and Conditions Agreement.........................................................................	10
Safety Precaution....................................................................................................	12
Precautions for Safe Use........................................................................................	13
Precautions for Correct Use...................................................................................	14
Regulations and Standards....................................................................................	15
Versions ...................................................................................................................	16
Related Manuals......................................................................................................	17
Terminology .............................................................................................................	19
Revision History......................................................................................................	21

Section 1			Overview of OPC UA Server Function
1-1		Overview and Features ...........................................................................................................		1-2
		1-1-1	Overview .....................................................................................................................................	1-2
		1-1-2	System Configuration..................................................................................................................	1-2
		1-1-3	Features......................................................................................................................................	1-2
1-2		Specifications ..........................................................................................................................		1-4
		1-2-1 List of Supported CPU Units .......................................................................................................		1-4
		1-2-2	Function Specifications ...............................................................................................................	1-5
1-3		OPC UA Server Procedures....................................................................................................		1-7
		1-3-1	Overall Procedure .......................................................................................................................	1-7
		1-3-2	Procedure Details........................................................................................................................	1-8

Section 2			Structure of the OPC UA Server
2-1		Internal Structure of the Overall OPC UA Communications System..................................		2-2
		2-1-1	Overview .....................................................................................................................................	2-2
		2-1-2	Details .........................................................................................................................................	2-3
2-2		Overview of the Security Function of the OPC UA Server...................................................		2-5

Section 3		Settings of the OPC UA Server
3-1		Controller Setup ......................................................................................................................	3-2
		3-1-1 IP Address Settings of the Built-in EtherNet/IP Port....................................................................	3-2

6	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

CONTENTS

3-2 OPC UA Settings......................................................................................................................		3-3
3-2-1	Overview of OPC UA Settings ....................................................................................................	3-3
3-2-2	OPC UA Server Settings.............................................................................................................	3-7
3-2-3	When necessary to cycle the power supply to the Controller or reset the Controller ...............	3-10
3-2-4	Automatic Generation of the Server Certificate ........................................................................	3-10
3-2-5	Setting and Displaying the Certificate........................................................................................	3-11
3-2-6	Security Settings.......................................................................................................................	3-22
3-2-7	Server Status............................................................................................................................	3-25
3-2-8	Displaying the Operation Logs..................................................................................................	3-25
3-2-9	Operations for the OPC UA Settings ........................................................................................	3-26

3-3 Creating Variables for OPC UA Communications ..............................................................		3-27
3-3-1	Global Variables Published to OPC UA Communications ........................................................	3-27
3-3-2	Adding or Deleting Network-published Variables......................................................................	3-28

Section 4 Starting and Checking the Status of the OPC UA Server

4-1 Starting or Stopping the OPC UA Server ..............................................................................		4-2
4-1-1	How to Start or Stop the OPC UA Server ...................................................................................	4-2
4-1-2	Conditions under Which the OPC UA Server Cannot be Started ...............................................	4-3
4-1-3	Conditions under Which the OPC UA Server Stops ...................................................................	4-3
4-1-4	Operation of the OPC UA Service Function in each State of the CPU Unit................................	4-4

4-2 Checking the Status of the OPC UA Server ..........................................................................		4-5
4-2-1	Checking Based on OPC UA Server Status of the Sysmac Studio ............................................	4-5
4-2-2	Checking Based on the Event Log .............................................................................................	4-7
4-2-3	Checking Based on the Execution Log.......................................................................................	4-7
4-2-4	Operating Status of the OPC UA Server.....................................................................................	4-7
4-2-5	Conditions for Reconfiguring the OPC UA Server ......................................................................	4-9

Section 5 Security Function of OPC UA Server

5-1	Details of the Connection Authentication Function of the OPC UA Server .......................		5-2
	5-1-1	Application Authentication...........................................................................................................	5-2
	5-1-2	User Authentication.....................................................................................................................	5-5
5-2	Details of the Message Security Function ............................................................................		5-7
	5-2-1	Signature and Encryption ...........................................................................................................	5-7
	5-2-2	OPC UA Security Mode and Policy.............................................................................................	5-7

Section 6 Connecting from the OPC UA Client and Reading/Writing Variables

6-1	Connecting from the OPC UA Client......................................................................................		6-2
	6-1-1	Specifying the URL of the Target OPC UA Server ......................................................................	6-2
	6-1-2	Connecting to the Target OPC UA Server ..................................................................................	6-2
6-2	Reading/Writing Variables from the OPC UA Client .............................................................		6-3
	6-2-1	Address Space of the NJ/NX-series Controller...........................................................................	6-3
	6-2-2	Reading/Writing the Variables of the CPU Unit ..........................................................................	6-5

Section 7		Execution Log Functions
	7-1 Execution Logs........................................................................................................................		7-2
7-1-1		Overview.....................................................................................................................................	7-2
	7-1-2 How to Use the Execution Log ...................................................................................................		7-4
	7-1-3 Setting the Execution Log...........................................................................................................		7-4
7-1-4		Checking the Execution Log .......................................................................................................	7-4
7-1-5		Execution Log File Specifications ...............................................................................................	7-5

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

7

CONTENTS

7-1-6	Format of Records ......................................................................................................................	7-5
7-1-7	Examples of Records in Execution Log File..............................................................................	7-11

7-2 Checking the Execution Log ................................................................................................		7-13
7-2-1	How to Check the Execution Log..............................................................................................	7-13
7-2-2	Checking Logs in the Operation Log Window in the Sysmac Studio ........................................	7-13
7-2-3	Checking Logs with the SD Memory Card ................................................................................	7-16
7-2-4	Checking Logs by Using FTP Client Software ..........................................................................	7-16

7-3 OPC UA Server Shutdown Function ....................................................................................		7-17
7-3-1	Overview ...................................................................................................................................	7-17
7-3-2	Shutdown System .....................................................................................................................	7-17
7-3-3	How to Execute the Shutdown Function ...................................................................................	7-18
7-3-4	How to Check the Shutdown of the OPC UA Server.................................................................	7-18

7-4 SD Memory Card Operations................................................................................................		7-19
7-4-1	Conditions for Saving Execution Log Files to the SD Memory Card.........................................	7-19
7-4-2	Directories Used for the OPC UA Server ..................................................................................	7-19
7-4-3	Execution Log Operation when Replacing the SD Memory Card .............................................	7-20
7-4-4	Approximate Work Time for SD Memory Card Replacement....................................................	7-20
7-4-5	Replacement Timing of SD Memory Card.................................................................................	7-20

Section 8			Other Functions
8-1		The Sysmac Studio Operation Authority Verification Related to the OPC UA Server ......		8-2
8-2		Backup and Restore Functions Related to the OPC UA Server..........................................		8-4
		8-2-1	Backup Function .........................................................................................................................	8-5
		8-2-2	Restoration and Verification ........................................................................................................	8-6
		8-2-3	Compatibility between Backup-related Files ...............................................................................	8-7
		8-2-4	How to Replace the CPU Unit in Relation to the OPC UA Server...............................................	8-8
8-3		Clear All Memory Function Related to the OPC UA Server .................................................		8-9

Section 9			Troubleshooting
9-1		Overview of Troubleshooting .................................................................................................		9-2
Section A			Appendices
	A-1	Task Design Procedure ...........................................................................................................		A-2
		A-1-1 Startup Time of the OPC UA Server (Reference Values)............................................................		A-2
		A-1-2 Guidelines for System Service Execution Time Ratio .................................................................		A-5
		A-1-3 Checking the System Service Execution Time Ratio ..................................................................		A-7
	A-2	OPC UA Instruction .................................................................................................................		A-9
		A-2-1 OPCUA_Shutdown (Shutdown OPC UA Function).....................................................................		A-9
		A-2-2	Variables .....................................................................................................................................	A-9
		A-2-3	Related System-defined Variables ............................................................................................	A-10
		A-2-4	Related Error Codes .................................................................................................................	A-10
		A-2-5	Function ....................................................................................................................................	A-10
		A-2-6 Precautions for Correct Use......................................................................................................		A-10
		A-2-7	Additional Information ...............................................................................................................	A-11
		A-2-8	Sample Programming ...............................................................................................................	A-11
	A-3	When CA-signed Client Certificates Supported .................................................................		A-13
		A-3-1	Overview ...................................................................................................................................	A-13
		A-3-2	Settings .....................................................................................................................................	A-14
		A-3-3 Related Operations Performed from OPC UA Settings in the Sysmac Studio..........................		A-14
	A-4	List of Related System-defined Variables ...........................................................................		A-18
		A-4-1 System-defined Variables for the Overall NJ/NX-series Controller (No Category) ...................		A-18
	A-5	Version Information...............................................................................................................		A-19

8	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

CONTENTS

A-5-1	Relationship between Unit Versions and OPC UA Standard Versions .....................................	A-19
A-5-2	Relationship between Unit Versions and the Sysmac Studio Versions ....................................	A-19

Index

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

9

Terms and Conditions Agreement

Terms and Conditions Agreement

Warranty, Limitations of Liability

Warranties

 Exclusive Warranty

Omron’s exclusive warranty is that the Products will be free from defects in materials and workmanship for a period of twelve months from the date of sale by Omron (or such other period expressed in writing by Omron). Omron disclaims all other warranties, express or implied.

 Limitations

OMRON MAKES NO WARRANTY OR REPRESENTATION, EXPRESS OR IMPLIED, ABOUT NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OF THE PRODUCTS. BUYER ACKNOWLEDGES THAT IT ALONE HAS DETERMINED THAT THE PRODUCTS WILL SUITABLY MEET THE REQUIREMENTS OF THEIR INTENDED USE.

Omron further disclaims all warranties and responsibility of any type for claims or expenses based on infringement by the Products or otherwise of any intellectual property right.

 Buyer Remedy

Omron’s sole obligation hereunder shall be, at Omron’s election, to (i) replace (in the form originally shipped with Buyer responsible for labor charges for removal or replacement thereof) the non-com- plying Product, (ii) repair the non-complying Product, or (iii) repay or credit Buyer an amount equal to the purchase price of the non-complying Product; provided that in no event shall Omron be responsible for warranty, repair, indemnity or any other claims or expenses regarding the Products unless Omron’s analysis confirms that the Products were properly handled, stored, installed and maintained and not subject to contamination, abuse, misuse or inappropriate modification. Return of any Products by Buyer must be approved in writing by Omron before shipment. Omron Companies shall not be liable for the suitability or unsuitability or the results from the use of Products in combination with any electrical or electronic components, circuits, system assemblies or any other materials or substances or environments. Any advice, recommendations or information given orally or in writing, are not to be construed as an amendment or addition to the above warranty.

See http://www.omron.com/global/ or contact your Omron representative for published information.

Limitation on Liability; Etc

OMRON COMPANIES SHALL NOT BE LIABLE FOR SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, LOSS OF PROFITS OR PRODUCTION OR COMMERCIAL LOSS IN ANY WAY CONNECTED WITH THE PRODUCTS, WHETHER SUCH CLAIM IS BASED IN CONTRACT, WARRANTY, NEGLIGENCE OR STRICT LIABILITY.

Further, in no event shall liability of Omron Companies exceed the individual price of the Product on which liability is asserted.

10	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Terms and Conditions Agreement

Application Considerations

Suitability of Use

Omron Companies shall not be responsible for conformity with any standards, codes or regulations which apply to the combination of the Product in the Buyer’s application or use of the Product. At Buyer’s request, Omron will provide applicable third party certification documents identifying ratings and limitations of use which apply to the Product. This information by itself is not sufficient for a complete determination of the suitability of the Product in combination with the end product, machine, system, or other application or use. Buyer shall be solely responsible for determining appropriateness of the particular Product with respect to Buyer’s application, product or system. Buyer shall take application responsibility in all cases.

NEVER USE THE PRODUCT FOR AN APPLICATION INVOLVING SERIOUS RISK TO LIFE OR PROPERTY OR IN LARGE QUANTITIES WITHOUT ENSURING THAT THE SYSTEM AS A WHOLE HAS BEEN DESIGNED TO ADDRESS THE RISKS, AND THAT THE OMRON PRODUCT(S) IS PROPERLY RATED AND INSTALLED FOR THE INTENDED USE WITHIN THE OVERALL EQUIPMENT OR SYSTEM.

Programmable Products

Omron Companies shall not be responsible for the user’s programming of a programmable Product, or any consequence thereof.

Disclaimers

Performance Data

Data presented in Omron Company websites, catalogs and other materials is provided as a guide for the user in determining suitability and does not constitute a warranty. It may represent the result of Omron’s test conditions, and the user must correlate it to actual application requirements. Actual performance is subject to the Omron’s Warranty and Limitations of Liability.

Change in Specifications

Product specifications and accessories may be changed at any time based on improvements and other reasons. It is our practice to change part numbers when published ratings or features are changed, or when significant construction changes are made. However, some specifications of the Product may be changed without any notice. When in doubt, special part numbers may be assigned to fix or establish key specifications for your application. Please consult with your Omron’s representative at any time to confirm actual specifications of purchased Product.

Errors and Omissions

Information presented by Omron Companies has been checked and is believed to be accurate; however, no responsibility is assumed for clerical, typographical or proofreading errors or omissions.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

11

Safety Precaution

Safety Precaution

Refer to the following manuals for safety precautions.

•NX-series CPU Unit Hardware User’s Manual (Cat. No. W535)

•NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

•NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

•Sysmac Studio Version 1 Operation Manual (Cat. No. W504)

12	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Precautions for Safe Use

Precautions for Safe Use

This section describes the precautions for the safe use of the OPC UA Server.

•Even if you accidentally add the client certificate of a client for which you do not want to permit connection in the Trusted Certificate List, the OPC UA Server of the NJ/NX-series Controller will permit connections from that client.

As a result, confidential information on the server side may be leaked or unintended operation may be performed. Therefore, when you add a certificate to the Trusted Certificate List from the Sysmac Studio, make sure that all the certificates that you will register in the Trusted Certificate List are trusted client certificates.

•Even if a global variable is set to Network Publish in the Sysmac Studio, the OPC UA client may not be able to refer to or read/write the variable in some cases depending on the limits sets on variables that can be published to the OPC UA client.

Refer to the event log or Execution Log, and review the variables to be published to the network depending on the cause of occurrence. For details on the restrictions on variables that can be published in the OPC UA client, refer to Restrictions on Publishing to the OPC UA Client on page 6-8 in

6-2-2 Reading/Writing the Variables of the CPU Unit on page 6-5.

Refer to the following manuals for other precautions for safe use that are not described above.

•NX-series CPU Unit Hardware User's Manual (Cat. No. W535)

•NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

•NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

•Sysmac Studio Version 1 Operation Manual (Cat. No. W504)

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

13

Precautions for Correct Use

Precautions for Correct Use

This section describes the precautions for the correct use of the OPC UA Server.

•If the IP address of the built-in EtherNet/IP port is changed after starting the use of the OPC UA Server, the OPC UA server certificate in the CPU Unit will be disabled, and it will not be possible to communicate with the OPC UA client. In that case, manually regenerate the server certificate, or set the IP address back to the original address.

•The server certificate is not applied for backup and restore because it is information belonging to individual CPU Units. If you replace the CPU Unit hardware, you cannot use the same server certificate for the new CPU Unit after the replacement.

Even if you set the IP address of the built-in EtherNet IP port to the same value as the one for the previous CPU Unit, be sure to export the server certificate of the new CPU Unit and then perform installation again on the OPC UA clients.

•Even in cases where you recreate the server certificate by changing the IP address in the same CPU Unit, make sure to export the server certificate of the CPU Unit and install it at the OPC UA client side.

•The OPC UA Server is executed as a system service.

Accordingly, if other system services are executed while the OPC UA Server is starting up, they may take longer.

Moreover, if the system service execution time ratio is less (if it is below approx. 20%, as a reference), the response to the requests from the OPC UA client will be delayed. In such a case, design the task so that the system service execution time ratio increases.

Refer to the following manuals for other precautions for correct use that are not described above.

•NX-series CPU Unit Hardware User’s Manual (Cat. No. W535)

•NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

•NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

•Sysmac Studio Version 1 Operation Manual (Cat. No. W504)

14	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Regulations and Standards

Regulations and Standards

Refer to the following manuals for regulations and standards.

•NX-series CPU Unit Hardware User’s Manual (Cat. No. W535)

•NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

•NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

Software Licenses and Copyrights

This product incorporates the following third party software. The license and copyright information associated with this software is available at http://www.fa.omron.co.jp/nj_info_e/.

OpenSSL

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit

(http://www.openssl.org/).

Copyright (C) 1995-1998 Eric Young ([e-mail]) All rights reserved. This product includes cryptographic software written by Eric Young ([e-mail])

This Windows version of this product includes software written by Tim Hudson ([e-mail])

LibXML2

This product includes code that was developed for the XML toolkit from the GNOME project

(http://xmlsoft.org/).

Copyright (C) 1998-2003 Daniel Veillard. All Rights Reserved.

OPC UA

This product includes code that was developed by Unified Automation GmbH for the OPC UA SDK (http://www.unifiedautomation.com/).

Copyright (C) 2008-2017 Unified Automation GmbH. All Rights Reserved.

The OPC UA SDK is based in part on <OPC UA Ansi C Stack> of the OPC Foundation. Initial version of <OPC UA Ansi C Stack> was founded and copyrighted by OPC Foundation,Inc. Copyright (C) 2008,2014 OPC Foundation, Inc., All Rights Reserved.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

15

Versions

Versions

Hardware revisions and unit versions are used to manage the hardware and software in the NJ/NXseries Units and EtherCAT slaves. The hardware revision or unit version is updated each time there is a change in hardware or software specifications. Even when two Units or EtherCAT slaves have the same model number, they will have functional or performance differences if they have different hardware revisions or unit versions.

Refer to the following manuals for versions.

•NX-series CPU Unit Hardware User’s Manual (Cat. No. W535)

•NJ-series CPU Unit Hardware User’s Manual (Cat. No. W500)

•NX-series NX102 CPU Unit Hardware User's Manual (Cat. No. W593)

Unit Versions of CPU Units and the Sysmac Studio Versions

The functions that are supported depend on the unit version of the NJ/NX-series CPU Unit. The version of the Sysmac Studio that supports the functions that were added for an upgrade is also required to use those functions.

Refer to A-5 Version Information on page A-19 for the relationship between the unit versions of the CPU Units and the Sysmac Studio versions, and for the functions that are supported by each unit version.

16	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Related Manuals

Related Manuals

The followings are the manuals related to this manual. Use these manuals for reference.

Manual name	Cat. No.	Model numbers	Application		Description
NJ-series CPU Unit OPC	W588	NJ501-100	Using the OPC UA with the	Information on the OPC UA is provided.
UA User's Manual (This		NX102-	NJ-series CPU Unit.
manual)		NX701-
NJ/NX-series CPU Unit	W506	NX701-	Using the built-in Ether-	Information on the built-in EtherNet/IP port is pro-
Built-in EtherNet/IP Port		NX102-	Net/IP port on an NJ/NX-	vided. Information is provided on the basic setup,
User’s Manual		NX1P2-	series CPU Unit.	tag data links, and other features.
		NJ501-
		NJ301-
		NJ101-
NX-series CPU Unit	W535	NX701-	Learning the basic	An introduction to the entire NX701 system
Hardware User’s Manual			specifications of the NX701	is provided along with the following information
			CPU Units, including	on the CPU Unit.
			introductory information,	•	Features and system configuration
			designing, installation, and	•	Introduction
			maintenance.	• Part names and functions
			Mainly hardware	•	General specifications
			information is provided.
				•	Installation and wiring
				• Maintenance and inspection
NJ-series CPU Unit	W500	NJ501-	Learning the basic specifi-	An introduction to the entire NJ-series system is
Hardware User’s Manual		NJ301-	cations of the NJ-series	provided along with the following information on
		NJ101-	CPU Units, including intro-	the CPU Unit.
			ductory information, design-	•	Features and system configuration
			ing, installation, and
				•	Introduction
			maintenance. Mainly hard-
				• Part names and functions
			ware information is pro-
				•	General specifications
			vided.
				•	Installation and wiring
				• Maintenance and inspection
NX-series NX102 CPU	W593	NX102-	Learning the basic specifi-	An introduction to the entire NX102 system is pro-
Unit Hardware User’s			cations of the NX102 CPU	vided along with the following information on the
Manual			Units, including introductory	CPU Unit.
			information, designing,	•	Features and system configuration
			installation, and mainte-
				•	Introduction
			nance.
				• Part names and functions
			Mainly hardware informa-
				•	General specifications
			tion is provided.
				•	Installation and wiring
				• Maintenance and inspection
NJ/NX-series CPU Unit	W501	NX701-	Learning how to program	The following information is provided on a Control-
Software User’s Manual		NX102-	and set up an NJ/NX-series	ler built with an NJ/NX-series CPU Unit.
		NX1P2-	CPU Unit. Mainly software	• CPU Unit operation
		NJ501-	information is provided.
				• CPU Unit features
		NJ301-
				•	Initial settings
		NJ101-
				• Programming based on IEC 61131-3 language
					specifications
NJ/NX-series Instruc-	W502	NX701-	Learning detailed specifica-	The instructions in the instruction set (IEC 61131-3
tions Reference Manual		NX102-	tions on the basic instruc-	specifications) are described.
		NX1P2-	tions of an NJ/NX-series
		NJ501-	CPU Unit.
		NJ301-
		NJ101-
NJ/NX-series Trouble-	W503	NX701-	Learning about the errors	Concepts on managing errors that may be
shooting Manual		NX102-	that may be detected in an	detected in an NJ/NX-series Controller and infor-
		NX1P2-	NJ/NX-series Controller.	mation on individual errors are described.
		NJ501-
		NJ301-
		NJ101-

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

17

Related Manuals

Manual name	Cat. No.	Model numbers	Application	Description
Sysmac Studio Version 1	W504	SYSMAC-	Learning about the operat-	Describes the operating procedures of the Sys-
Operation Manual		SE2	ing procedures and func-	mac Studio.
			tions of the Sysmac Studio.

18	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Terminology

Terminology

This section provides definitions of terms related to the OPC UA.

Term		Description
Address space	A collection of information that visualizes the OPC UA server with respect to the
	OPC UA client.
	By referencing this information, the OPC UA client can use the objects of the OPC
	UA server and their related information.
Application authentication	The authentication of each other’s identity by the server and the OPC UA client
	through the exchange of the mutual X.509 digital certificates during the establish-
	ment of a connection from the OPC UA client to the server.
Certificate Authority	Organization that issues certificates.
Client authentication	Indicates the direct authentication of client certificates.
	•	Authentication of a self-signed client certificate is performed depending on
		whether it is present in the trusted certificate list.
	•	Authentication of a CA-signed client certificate is performed by checking the trust
		and revocation of the signed CA certificate.
Client certificate	An X.509 digital certificate that certifies the OPC UA client.
	It is generated and managed by the OPC UA client in combination with the private
	key of the certificate.
	In the NJ/NX-series, it is necessary to register the client certificate in the CPU Unit
	by the Sysmac Studio.
End point	The physical address that can be used on the OPC UA communications network
	used by the OPC UA client to access the OPC UA server. Specifically, the following
	address:
	opc.tcp:// [IPAddress]-[Port]
	In the case of the OPC UA Server, the default address is:
	opc.tcp://192.168.250.1:4840/
Event	A phenomenon that occurs in an unplanned and irregular manner in the NJ/NX-
	series Controllers.
Event log	A log for recognizing and recording the events that have occurred in the entire Con-
	troller. It is recorded in the CPU Unit.
	In the OPC UA Server, it indicates the errors and various states of the OPC UA
	Server.
Execution log	A log for recording the execution state of the OPC UA Server. It is saved in an SD
	Memory Card (sold separately).
	As compared to the event log, the execution log has a higher capacity and includes
	the access results from the OPC UA client to the variables.
	In view of future functional expansion, this Execution Log is considered as one of
	the types in the leading concept of the Operation log in the Sysmac Studio.
Issuer authentication	Indicates the authentication by the certificate authority itself that has signed the cli-
	ent certificate.
	Authentication of a CA-signed client certificate is performed by checking the trust
	and revocation of the certificate of the certificate authority itself.
Message	The data unit that expresses the requests or responses of the OPC UA server
	transmitted between the OPC UA client and the server.
Node	The basic component of the address space.
OPC UA	A protocol for communications between industrial devices that is independent of
	the manufacturer and platform, and is safe with a high reliability. It has an architec-
	ture in which the conventional OPC (Object Linking and Embedding for Process
	Control) has been generalized and widened in scope.
OPC UA client	An application or computer that supports the OPC UA and issues a service request
	to the OPC UA server. Specifically, the main entity of communications, such as the
	SCADA and MES.
OPC UA instruction	Indicates instructions related to the OPC UA Server.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

19

Terminology

Term	Description
OPC UA security mode	Setting the encryption and signature of messages in the security-related settings of
	messages in the OPC UA.
OPC UA security policy	Specification of algorithms such as signatures and encryption in the security-related
	settings of messages in the OPC UA.
OPC UA security profile	A common name for the client certificate, CA certificate, certificate revocation list,
	and security settings.
OPC UA Server	A communications service that provides the function of connecting to the OPC UA
	client in the NJ/NX-series. It is executed in a system service within the processing
	of the CPU Unit.
OPC UA server	Main entity of communications, such as an application, computer, or controller that
	supports the OPC UA, executes a service in response to a service request from the
	OPC UA client, and also sends a response.
Rejected certificate list	A list of client certificates that have been rejected at the server side in application
	authentication.
Server certificate	An X.509 digital certificate that certifies the OPC UA server.
	It is generated and managed by the OPC UA server in combination with the private
	key of the certificate.
	In the NJ/NX-series, it indicates the self-certificate that certifies an individual CPU
	Unit as an OPC UA server. It is different for each serial number of the CPU Unit.
Security policy	A common name for the OPC UA security mode and OPC UA security policy.
Security settings	A common name for user authentication settings, anonymous login, and security
	policy.
Trusted certificate list	A list of certificates of the communications partner that must be trusted in applica-
	tion authentication.
	There are the following two types of trusted certificate lists at the server side and
	the OPC UA client side:
	• Trusted certificate list at the server side: A list of client certificates that have been
	set to trust the OPC UA client.
	• Trusted certificate list at the OPC UA client side: A list of server certificates that
	have been set to trust the server.
User authentication	The authentication of the identity of the user operating the OPC UA client by the
	server during the establishment of a connection from the OPC UA client to the
	server.

20	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

Revision History

Revision History

A manual revision code appears as a suffix to the catalog number on the front and back covers of the manual.

Cat. No.		W588-E1-04
						Revision code
Revision code	Date	Revised content
01	January 2018	Original production
02	April 2018	Added information on the NX102-.
03	July 2019	Corrected mistakes.
04	January 2021	Added information on the NX701-1.

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

21

Revision History

22	NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1

Overview of OPC UA Server Function

This section describes an overview of the OPC UA Server function.

1-1 Overview and Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

1-1-1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

1-1-2 System Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

1-1-3 Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

1-2 Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4

1-2-1	List of Supported CPU Units . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .	1-4
1-2-2	Function Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .	1-5
1-3 OPC UA Server Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .		1-7

1-3-1 Overall Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7

1-3-2 Procedure Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 - 1

1 Overview of OPC UA Server Function

1-1 Overview and Features

This section describes an overview and features of the OPC UA Server function.

1-1-1 Overview

The OPC UA Server function enables the NJ/NX-series CPU Unit to operate as an OPC UA server. With this function, OPC UA clients can connect via Ethernet to the built-in EtherNet/IP port of the NJ/NX-series CPU Unit using the OPC UA communications, and then read and write variables in the CPU Unit.

The OPC UA communications can simultaneously achieve both addressing security risks and connecting with general-purpose methods. Therefore, the OPC UA Server function enables secure data exchanges between the CPU Unit and host systems such as SCADA or MES compatible OPC UA so that the host systems can collect manufacturing progress information or issue manufacturing instructions.

1-1-2 System Configuration

The OPC UA Server function supports the following system configuration.

OPC UA Client

- SCADA software - MES etc.

	Sysmac Studio
	NJ/NX-series CPU Unit				OPC UA communications
	OPC UA Server function				.

Built-in EtherNet/IP port

Refer to A-5 Version Information on page A-19 for the Unit version of the CPU Unit and the version of the Sysmac Studio that can be supported.

1-1-3 Features

The OPC UA Server function has the following features.

Supporting OPC UA Communications as Secure Industrial Standard

Communications

OPC UA communications have the following features.

•A versatile global standard network from discrete control to process control, and from the sensor or controller level to the host monitoring and management level.

•Also defined as a recommended communications standard of Industrie 4.0 to connect the control networks in factories to the IT networks.

1 - 2

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 Overview of OPC UA Server Function

•Allows full-scale secure information exchange in the industrial system consisting of different devices.

•Allows to expand the visualization of information adapting to the system in the object-based Address Space.

Providing the Server Function of OPC UA Communications in the NJ/NX-series Controller

The NJ/NX-series OPC UA Server function has the following features.

•It allows the Controller to connect directly to the OPC UA client via Ethernet without relaying the computer.

•Since the NJ/NX-series CPU Unit has EtherCAT communications as the lower level network, it makes it easy to gather sensor and actuator level information on EtherCAT into OPC UA communications as a higher network.

•You can check the operation results of the OPC UA Server function from the event log in the Controller and the Execution Log.

<![if ! IE]>

<![endif]>Features and Overview 1-1

1

<![if ! IE]>

<![endif]>Features 3-1-1

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 - 3

1 Overview of OPC UA Server Function

1-2 Specifications

This section describes the specifications of the OPC UA Server function.

1-2-1 List of Supported CPU Units

The OPC UA Server is supported by the following CPU Unit models.

CPU Unit Models	Unit version
NX701-1600	1.24 or later
NX701-1700
NX701-1620
NX701-1720
NJ501-1300	1.17 or later
NJ501-1400
NJ501-1500
NX102-9000	1.30 or later
NX102-1000
NX102-1100
NX102-1200
NX102-9020
NX102-1020
NX102-1120
NX102-1220

1 - 4

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 Overview of OPC UA Server Function

1-2-2			Function Specifications
		Specifications of the OPC UA Server
Item					NJ501-100	NX701-1	NX102-
					Built-in EtherNet/IP	Built-in EtherNet/IP port (PORT 1) on the
					port on the CPU	CPU Unit
Connection ports					Unit
					Note: The OPC UA Server can be used simultaneously with Eth-
					erNet/IP communications.
OPC UA function					Server function
Transport and data encoding					UA TCP binary
Supported profile and model					Micro Embedded Device Server Profile
					PLCopen Information Model
					opc.tcp: // [IP address] : [port number] /
Endpoint URL (Server URL)					By default, below.
					opc.tcp: //192.168.250.1: 4840 /
Maximum number of sessions (client)					5
Maximum number of monitored items per server					2,000
Maximum number of subscriptions per server					100
Variable type					Network variable
Conditions as				Maximum number of variables that	10,000
				can be published
a whole net-
				Maximum number of value attri-	10,000
work-pub-
				butes that can be published
lished
				Maximum number of structure defi-	100
variables *1
				nitions that can be published

•Multidimensional array specified structure

•Structure containing multidimensional array(s) as member(s)

•Structure whose nesting number exceeds three

	Conditions that can not be published for each net-		•	Union, and structure containing union(s) as member(s)
	work-published variable *1		•	Array whose start number is not 0; e.g., Array[2..5]
			•	Array whose number of elements exceeds 1024
			•	Structure whose number of members exceeds 100
			•	Variable whose size exceeds 1024 bytes
			Allowable security methods can be specified from the following
			(multiple specifications possible):
			•	Both signature and encryption required: SignAndEncrypt
				Signature and encryption algorithm: Basic256-
	OPC UA security mode and policy			Sha256/Basic256/Basic128Rsa15
				(multiple specifications possible)
			•	Only signature required: Sign
				Signature algorithm: Basic256Sha256/Basic256/Basic128R-
				sa15 (multiple specifications possible)
			•	Neither signature nor encryption required
	Application	Authentication	X.509
			•	Trusted certificate: 32
	authentica-	Number of certificates that can be
			•	CA certificate: 32
	tion	stored
			•	Rejected certificate: 32

<![if ! IE]>

<![endif]>Specifications 2-1

1

<![if ! IE]>

<![endif]>Specifications Function 2-2-1

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)

1 - 5

1 Overview of OPC UA Server Function

Item		NJ501-100	NX701-1	NX102-
User authen-		The following can be	set:
	Method of user authentication	• User name and Password
tication
		• Anonymous

*1. For details, refer to Restrictions on Publishing to the OPC UA Client on page 6-8.

Precautions for Correct Use

For the NX701-1 CPU Unit and NX102- CPU Unit, there are two built-in EtherNet/IP ports, PORT 1 and PORT 2. Note that only PORT 1 is the port that supports the OPC UA Server.

1 - 6

NJ/NX-series CPU Unit OPC UA User’s Manual (W588)