OPC UA Security Policies and User Authentication: What to Enable, and What It Costs

Table of security policies against the three message security modes, showing that mode None is legal only with policy None, that Basic128Rsa15 and Basic256 are deprecated and should be left off, and that Basic256Sha256 and the two Aes policies are usable with Sign or SignAndEncrypt

OPC UA Security Policies and User Authentication: What to Enable, and What It Costs One RSA-2048 private-key operation measured 3.363 ms on the laptop this was written on, and one pass of AES-256 over a kilobyte of notification measured about 2.1 microseconds. That ratio, roughly sixteen hundred to one, is the whole of the OPC … Read more

Kinetix 5700 DC Bus Sharing: What the Bus Supply Carries and Where the Limit Is

Two boxes joined by an orange cable: a power supply cluster holding a 2198-P208, a 2198-S086, a 2198-D020, a 2198-D006, a 2198-CAPMOD-2240 and a 2198-CAPMOD-DCBUS-IO extension module, and an extended cluster holding the same accessory pair followed by three inverters, with the customer-supplied DC-bus cable rated 104 A between them and the note that both boxes are one DC-bus group

Kinetix 5700 DC Bus Sharing: What the Bus Supply Carries and Where the Limit Is A 2198-P208 supports 13,000 µF of total system capacitance and puts out 46 kW continuously. Those are two separate ceilings, they get reached by two different kinds of machine, and on most rails the one that stops you first is … Read more

Removing an Axis From a Running Kinetix 5700 System Without Faulting the Rest

A Kinetix 5700 rail drawn twice: as commissioned with six modules from a 2198-P208 through to a capacitor module, and again with the 55 mm 2198-D032 pulled out leaving a dashed gap, annotated with the two ways out — shift every module right of the gap 55 mm left and re-drill, or leave the inverter bolted in place and inhibit it — and the warning that the rail cannot be opened until power is off and a meter says the bus is down

Removing an Axis From a Running Kinetix 5700 System Without Faulting the Rest A 2198-D032-ERS4 is two axes behind one Ethernet connection on one set of bus bars, and inhibiting either half takes the other half with it. Getting the module off the rail is a different order of problem: control power and mains off, … Read more

Adding an Axis to a Kinetix 5700 System: the Module, the Axis, and the Four Places to Set It

The Logix Designer controller organiser with a new 2198-D032-ERS4 named Drv_04 under the Ethernet bridge alongside a 2198-P208 and a 2198-S160-ERS4, and beneath it a motion group named Line_MG holding Axis_01 plus two new AXIS_CIP_DRIVE tags Axis_04A and Axis_04B, with a panel listing what the tree does not show: the bus sharing group, the half axis, ungrouped axes and the capacitance total

Adding an Axis to a Kinetix 5700 System: the Module, the Axis, and the Four Places to Set It The eighth axis on the line is a 2198-D032-ERS4 in the last 55 mm of the rail, and getting it into the project is four dialogs and about twenty minutes. What takes the rest of the … Read more

OPC UA Certificates: Trust, Rejection, and Why the First Handshake Fails

The six stages of a first OPC UA connection drawn as boxes with numbered break points underneath: Hello and Acknowledge, the OpenSecureChannel request carrying the client certificate, the response carrying the server certificate, CreateSession, ActivateSession with the user token, and the first Browse or Read, with a different status code named at each break

OPC UA Certificates: Trust, Rejection, and Why the First Handshake Fails BadSecurityChecksFailed, status 0x80130000, is the answer an OPC UA server gives when it has decided not to talk to you and is not permitted to say why. Part 6 of the specification is explicit about it: the Reason string in an abort message “shall … Read more

The Kinetix 5700 Power Rail: What Each Module Is, and the Order They Go In

A Kinetix 5700 rail drawn left to right with seven modules: a 2198-P208 DC-bus power supply at 85 mm, a 2198-S160-ERS4 single-axis inverter at 100 mm, a 2198-S086-ERS4 at 85 mm, two dual-axis inverters and two accessory modules at 55 mm each, with the DC-bus link lengths marked above each joint and end caps at both ends

The Kinetix 5700 Power Rail: What Each Module Is, and the Order They Go In A 2198-D032-ERS4 is 55 mm wide, a 2198-S160-ERS4 is 100 mm, and the DC-bus link that joins one module to the next is a moulded part in a fixed length that arrives in the box with the module. There is … Read more

Safety Feedback on a Kinetix 5700: What SFX and the Safe Speed Functions Need From the Encoder

The chain from encoder to safe speed function on a Kinetix 5700: cycles per revolution, the DSL or universal port with its interpolation, the motion safety instance, the safety input assembly, the SFX instruction and the safety instructions that use its outputs

Safety Feedback on a Kinetix 5700: What SFX and the Safe Speed Functions Need From the Encoder A VPL-B0631T-W gives 512 cycles per motor revolution and a VPC-Bxxxx-Q gives 4096. Put the wrong one of those two numbers into the Motion Safety instance and the drive catches you: the DSL diagnostics compare the configured resolution … Read more

The 1756-OBV8S Safety Output Card: What a Pulse Test Does to a Contactor

Bipolar against sourcing on a 1756-OBV8S: a single P and M pair driving one contactor, a fixed sourcing pair driving two, and the ratings, currents and chassis rules underneath

The 1756-OBV8S Safety Output Card: What a Pulse Test Does to a Contactor Point 3 of a 1756-OBV8S flashes red while its output is off, and the contactor it drives is behaving perfectly. That is no-load detection, and it is telling you the truth: something between OUT3-P and the coil has come apart. The detection … Read more

The 1756-IB16S Safety Input Card: Dual Channel, Test Pulses and What OSSD Means

A dual-channel gate switch wired to a 1756-IB16S with TO-0 to IN-0 and TO-1 to IN-1, the rest of the terminals shown, and the point mode, pulse and delay rules printed underneath

The 1756-IB16S Safety Input Card: Dual Channel, Test Pulses and What OSSD Means Channels 0 and 8 look like the obvious pair for a dual-channel gate switch on a 1756-IB16S. They are directly opposite each other on the terminal block and the wiring is tidy. They are also the one pair the module will not … Read more

OPC DA to OPC UA: What Changed, and the Tunneller You No Longer Need

The path of one OPC DA read drawn as six boxes: SCADA client calling IOPCSyncIO Read, the COM runtime marshalling with the caller identity, TCP 135 as the RPC endpoint mapper, a second connection to a dynamic port above 49152, the DA server executable and its account question, and the EtherNet or IP driver to the controller

OPC DA to OPC UA: What Changed, and the Tunneller You No Longer Need KB5004442 stopped being optional on 14 March 2023, and with it went the last registry value that could keep an OPC DA link alive between two Windows machines. RequireIntegrityActivationAuthenticationLevel is still sitting under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat on every machine somebody set it on, … Read more

Hardwired or Networked Safe Torque Off on a Kinetix 5700: What Each One Needs

The two paths a stop request takes to the same gate driver: a guard switch through a 440R relay into the STO connector, and a safety device through GuardLogix and EtherNet/IP into the same gate control

Hardwired or Networked Safe Torque Off on a Kinetix 5700: What Each One Needs The drive is in the GuardLogix I/O tree, the safety connection shows as running, SO.SafeTorqueOff is high, and the axis still refuses to enable. Read the STO fault type over an explicit message and it comes back 104: hardwired input in … Read more

Safe Torque Off on a Kinetix 5700: Wiring the STO Connector, and What It Does Not Do

The STO connector on a Kinetix 5700 inverter: a dual-channel safety device with contacts 13/14 and 23/24 feeding STO-2 and STO-4, the supply common landing on STO-3, and the 16 pins of the plug named with their signals

Safe Torque Off on a Kinetix 5700: Wiring the STO Connector, and What It Does Not Do One contact of the gate switch opens a few hundred milliseconds before the other, and a second later a 2198-D032-ERS4 posts GuardStopInputFault. The axis will not come back with a normal fault reset. Both safety inputs have to … Read more

Advertisement