Administration

The Administration Tool is used to configure general settings of the UaGateway itself. The Administration Tool can only be started with administrator privileges. You can use the tool to configure:

• General Settings
  enable autostart, set the user context for the UaGateway service
• UA Endpoints
  add, remove and configure UA Endpoints for the UaGateway's UA Server
• OPC DA (COM)
  configure property mapping of COM DA properties to UA attributes
• Trace
  start/stop the trace of UaGateway application and UA Stack
• Certificates
  certificate management of the UaGateway's certificate store

Directly after installation the setup procedure will startup the Administration Tool. You must configure the basic settings regarding UA Certificates of the UaGateway and you must choose the User Context the UaGateway service will run in:

• First startup of the Administration Tool

General Settings

The UaGeteway runs as Windows NT service. A specific user context is assigned to this service to allow proper COM/DCOM configuration. The user you select is assigned to the UaGateway service. In addition, the user is granted the LogOnAsService right (to allow him to start the service) and is added into a local user group ("UaGatewayUsers"). This group is added to the Access Control List (ACL) of the local machine. For proper COM/DCOM configuration you now just need to add all users that should be able to start and access the UaGateway to this group.

UA Endpoints

The UA Endpoint is the connection information a UA Client needs to connect with UaGateway. By default the endpoint configuration is set to standard values. The default is represented by one single UA Endpoint that offers two security options: None and Basic128RSsa15. The "None" security policy allows every UA Client to connect to the UaGateway, it is recommended to use this configuration just during commissioning and testing, in a production environment this configuration should be switched off. In this dialog it is possible to configure all settings related to the UA Endpoints of UaGateway.

Network Configuration
- Endpoint URL: This is the Endpoint URL of the UaGateway as it will be seen in FindServers and GetEndpoint calls.
- Protocol: This is the protocol used for this endpoint.
- Hostname / IP: This is the hostname of the UaGateway (it also could be the IP Address of the PC the UaGateway runs on).
- Network Adapter: This is the Network Adapter to bind to. Possible selections are:

• All: Select to bind to all IP addresses of the computer. The endpoint will be reachable on the given port on all IP addresses.
• Network Adapter: Select a Network Adapter and an IP address (below) to bind only to this address. The Endpoint will be reachable for clients only connecting to the selected IP address.
• Local only: If this is selected the UaGateway binds to the loopback adapter only. The Endpoint will be reachable only for clients on the same machine as the UaGateway runs.

- Port: This is the TCP port of the Endpoint (typically 4850).


Security
The supported security settings of the Endpoint can be configured here.

OPC DA (COM)

Default NameSpace
The default name space can be set to the name space of one unterlying COM DA Server. The ItemIDs of that particular underlying COM DA Server will than be accessible through the 'original' ItemID, because the default name space is internally automatically added when accessing the Item. This feature can be used to avoid reconfiguring all ItemIDs in the Client that accesses the UaGateway's Server being connected to an underlying COM DA Server.

Property mapping from UA to COM DA
When connecting to an underlying OPC COM DA Server all 6 standard properties (DataType, Value, Quality, TimeStamp, AccessRights and ScanRate) are transparently mapped. Underlying OPC UA Servers may provide additional properties (e.g. user defined properties, DI properties, etc.) Those properties can be mapped to vendor specific properties (PropertyID >= 5000) in the UaGateway's COM DA Server. These vendor specific properties are mapped automatically, but not stored in the UaGateways XML config file. This will be done if you connect to an underlying COM Server and browse to a Node containing one (or more) of these vendor specific properties. You can use this dialog to configure how these UA properties should be mapped to COM DA vendor specific properties if you want to change the PropertyID. You must specify the UA side property name and the namespace of the UA Server where these properties exsist and assign them to COM DA property IDs. When connecting to the COM DA Server of the UaGateway you can QueryAvailableProperties of an individual OPCItem and you will see the mapped properties as configured (in the range of vendor specific properties above 5000).

Trace

The UaGateway provides several tracing capabilities for being able to analyze any problems that might occur during runtime of the UaGateway. You can enable the tracing functionality of either the "Application Trace" or the "Stack Trace" (or both at the same time). Depending on the depth of information you need, different trace levels can be applied. The trace level has massive impact on the performance and the amount of data that is created. The preset trace level of both traces is the highest level.
By pressing the button Open Folder... the folder of the generated log file(s) can be opened. To set the path of the log file just press the button ....

The trace levels of the "Application Trace" are (in ascending order):

• NoTrace
• Errors
• Warning
• Info
• InterfaceCall
• CtorDtor
• ProgramFlow
• Data

The trace levels of the "Stack Trace" are (in ascending order):

• NONE
• ERROR
• WARNING
• SYSTEM
• INFO
• DEBUG
• CONTENT
• ALL

Certificates

This tab is used to manage the certificate store of the UaGateway. It shows all accepted and trusted (or untrusted) certificates of the UaGateway. It is also possible to create a new UaGateway certificate if the previous one is out of date or if a stronger encryption is desired. By pressing the button Create new Application Certificate... you create a new application instance certificate for the UaGateway. Keep in mind that all UA Clients that want to connect to UaGateway will need this certificate in their trust list.