Commissioning Checklist

The following outline presents a sequence of tasks to follow when commissioning and installing a new BMENUA0100 module. This example configures the module to operate in Self-Signed & CA PKI mode with both IPV6 SLAAC and IPV4 addresses:

  1. Configure the Control Expert application.

  2. Configure the router / SLAAC server (for IPV6 in SLAAC mode).

  3. Select secured mode operations for the module:

    1. Set rotary switch on the back of the module to the Secured operating mode position.

    2. Install the module into an Ethernet slot on the rack.

  4. Configure the cybersecurity settings using the module web pages:

    1. Create the cybersecurity configuration using the Settings web page.

    2. Set the PKI mode to Self-Signed & CA.

    3. For client devices that do not support PKI, create a Trusted Clients Certificates whitelist.

    4. Apply the configuration file.

  5. Perform manual certificate enrollment:

    1. Generate a certificate signing request (CSR).

    2. Push the CA certificate.

    3. Push the device certificate.

  6. Add the CA certificate to OPC UA client devices.

  7. Test communication between the OPC UA client and server.