OPC-10000-21 Potential Inconsistency with Secure Channel during ProvideIdentities|OPC UA Standard|Forum|OPC Foundation

Avatar
Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
Lost password?
sp_Feed sp_PrintTopic sp_TopicIcon
OPC-10000-21 Potential Inconsistency with Secure Channel during ProvideIdentities
Avatar
Tim Brüggemann
Member
Members
Forum Posts: 4
Member Since:
10/15/2026
sp_UserOfflineSmall Offline
1
10/15/2026 - 07:54
sp_Permalink sp_Print

Hi,

 

I am reading OPC-10000-21 V1.05.04.

Section "7.1 - Overview" states:

"When using PullManagement (7.2) the DCA connects to the Registrar without security and calls the ProvideIdentities Method."

In section "7.2 Pull Management", the flow chart diagram in "Figure 4" makes it seem like "ProvideIdentities" is indeed called without security and the "Create SecureChannel" occurs at a later time.

However, section "9.2.3 ProvideIdentities" states:

"This Method shall be called from an authenticated SecureChannel."

Am I overlooking something or is this an inconsistency in the specification?

Avatar
Randy Armstrong
Admin
Forum Posts: 1696
Member Since:
05/30/2017
sp_UserOfflineSmall Offline
2
10/15/2026 - 17:30
sp_Permalink sp_Print sp_EditHistory

It appears to be an inconsistency/cut and paste issue.

What the first connection with the DCA should use an IDevID as a client cert and the Registrar should accept it as untrusted.

i.e. authenticated but without trust.

The next steps establish trust.

Needs a mantis issue against Part21: 

https://mantis.opcfoundation.o.....default=no

Avatar
Tim Brüggemann
Member
Members
Forum Posts: 4
Member Since:
10/15/2026
sp_UserOfflineSmall Offline
Forum Timezone: America/Phoenix
Most Users Ever Online: 1361
Currently Online:
Guest(s) 23
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Forum Stats:
Groups: 2
Forums: 10
Topics: 1536
Posts: 5201