Personnel Qualifications; General Safety Instructions; Damage Due To Control Network Malfunction; About This Product - Emerson AVENTICS AES OPC-UA Mode D'emploi

Safety risk due to direct connection to the Internet or the company net-
work!
The AES module has not been designed for connection to the Internet or a
company network and is not adequately protected against unauthorized ac-
cess.
Devices that are connected to the Internet or a company network, have to be
adequately protected against unauthorized access, e.g. by using a firewall and
network segmentation. The AES module has only been designed for operation
in an Ethernet-based fieldbus network.
Do not connect the AES module directly to the Internet or a company net-
u
work.
AVENTICS GmbH is not liable for any damages resulting from improper use. The
user alone bears the risks of improper use of the product.

2.4 Personnel qualifications

The work described in this documentation requires basic electrical and pneu-
matic knowledge, as well as knowledge of the appropriate technical terms. In or-
der to ensure safe use, these activities may therefore only be carried out by quali-
fied technical personnel or an instructed person under the direction and supervi-
sion of qualified personnel.
Qualified personnel are those who can recognize possible dangers and institute
the appropriate safety measures, due to their professional training, knowledge,
and experience, as well as their understanding of the relevant regulations per-
taining to the work to be done. Qualified personnel must observe the rules rele-
vant to the subject area.

2.5 General safety instructions

• Observe the safety notes found in your bus coupler's system description.

2.6 Damage due to control network malfunction

Products with Ethernet connection are designed to be used on specific industrial
control networks. Observe the following safety measures:
• Always follow industry best practices for network segmentation.
• Avoid exposing products with Ethernet connection directly to the Internet.
• Minimize internet and business network exposure for all control system de-
vices and/or control systems.
• Ensure that products, control system devices and/or control systems are not
accessible from the Internet.
• Locate control networks and remote devices behind firewalls and isolate them
from the business network.
• If remote access is required, only use secure methods such as Virtual Private
Networks (VPNs).
NOTICE! Recognize that VPNs and other software-based products may have
vulnerabilities. A VPN is only as secure as the connected devices it serves. Al-
ways use the current version of the VPN, the firewall and other software-based
products.
• Ensure that the latest released software and firmware versions are installed on
all products connected to the network.

3 About this product

OPC-UA is the interoperability standard for secure and reliable data exchange in
industrial automation and other industries. OPC-UA is a protocol with a semantic
component, which describes each data point in more detail. For example, OPC-
UA describes if the data points are provided with a unit or a range. The OPC-UA
protocol fulfills the functions of the Micro Embedded Device Server Profiles.

4 OPC-UA connection

4.1 Establishing an OPC-UA connection with the AES module

In addition to the fieldbuses, the AES Gen2 modules with the Profinet and Ether-
Net/IP protocols provide an OPC-UA server on port 4840. The OPC-UA clients can
connect to the OPC-UA server in the AES module.
AVENTICS™ AES OPC-UA | R412028203-BAL-001-AA | English
NOTICE
Requirement:
In order to establish a connection, the device that is supposed to connect to the
AES module via OPC-UA must be located in the same subnet. Alternatively, a
gateway has to exist that connects the subnets of the two devices to each other.
It is then possible to establish a connection to the AES module on port 4840 via
OPC-UA.
1. To find the IP address of the AES module, use the protocol-specific tools or the
Ethernet "Device Configuration Tool".
2. Establish OPC-UA connection with the AES module.

4.2 OPC-UA structure

4.2.1 Data description

Structural data/elements
SystemInfo MAC_Address1
MAC_Address2
MAC_Address3
Manufacturer
Model
HardwareRevision
SoftwareRevision
DeviceRevision
DeviceManual
SerialNumber
RevisionCounter
ProductCode
Nameplate PhysicalAddress
CountryCode
Street
ZIP
CityTown
StateCounty
MarkingCE
CEQualificationPre-
sent
SerialNumber
ManufacturerName
ManufacturerProductDesigna-
tion
ProductCountryOfOrigin
YearOfConstruction
WeekOfConstruction
SystemStatus ValveSystemDiagnosis
ValveVoltageBe-
lowUAOff
ValveVoltageBe-
lowUAOn
ElectronicVoltageBe-
low18V
ElectronicVoltageBe-
low10V
UpTime
DeviceConfig Module01
...
Module42
NumberOfConfiguredModules
IO_Modules IO_Module01
Specifications/value de- Data type
scription
First MAC address of the AES
module
Second MAC address of the
AES module
Third MAC address of the AES
module
Manufacturer of the unit Localized-
Model designation Localized-
Hardware version of the mod-
ule
Software version of the mod-
ule
Module revision
Link to the module manual
Unique combination of letters
and numbers to identify the
device
Revision counter as a number
Module name
Manufacturer information
Country code
Street address
ZIP code
City
State
Product label
Is a CE qualification present?
Unique combination of letters
and numbers to identify the
device
Manufacturer name
Product designation
Country of manufacture
Year of manufacture
Week of manufacture
...
Actuator voltage below UA-
OFF
Actuator voltage below UA-
ON (21.6 V)
Electronics voltage is below
18 V DC
Electronics voltage is below
10 V DC
Time in ms since start of de-
vice
Module name, encoded in an
Enum
Number of recognized mod-
ules
I/O Module 1
String
String
String
Text
Text
String
String
String
String
String
Int32
String
String
String
String
String
String
Bool
String
String
String
String
String
String
Bool
Bool
Bool
Bool
UInt32
Enum
Byte
10