Kaspersky Machine Learning for Anomaly Detection

Configuring the OPC UA Connector

Kaspersky MLAD uses the OPC UA Connector to receive data over a protocol described by the OPC Unified Architecture specification.

System administrators can configure the OPC UA Connector.

To configure the OPC UA Connector:

1. In the lower-left corner of the window, click .

   You will be taken to the administrator menu.

2. Select System parameters → OPC UA Connector.

   A list of options appears on the right.

3. In the Connection point field, specify the connection address.

   For example: opc.tcp://10.0.0.0:8001/freeopcua/server/.

4. In the OPC UA server connection timeout (sec) field, specify the time period (in seconds) that the OPC UA Connector will attempt to establish a connection with the OPC UA server.
5. Using the Browse button under the Configuration file setting, add a file containing settings for the OPC UA Connector.

   To delete the connector configuration file, click the button. To save the connector configuration file on your computer, click the button.

6. Toggle Scale obtained tag values switch to enable or disable the conversion of tag values according to the Bias and Multiplier settings that were set when creating the tag.

   Conversion of received tag values is disabled by default.

7. Select a message encryption algorithm from the Connection security policy drop-down list.

   The following options can be selected: None, Basic256, Basic128Rsa15, Basic256Sha256, Aes128Sha256RsaOaep.

8. In the Secure messaging mode drop-down list, select one of the following values:
   1. If you do not want to sign or encrypt messages, select None.
   2. If you want to sign messages, select Sign messages.
   3. If you want to sign and encrypt messages, select Sign and encrypt messages.
9. In User name, enter the user name for connecting to the OPC UA server.
10. In Password, enter the password for connecting to the OPC UA server.
11. If it is necessary to use a secure connection and client authentication is enabled on the OPC UA server, do the following:
    1. Add the client application certificate by using the Browse button under the Client certificate setting.
    2. Add the private key to the client application certificate by using the Browse button under the Client private key setting.
    3. In Client private key password, specify the password to use for unlocking the private key.

    It is recommended to use a certificate with a certificate key length of 4096 bits when using the RSA algorithm, or 256 bits when using the ECDH algorithm.
    A certificate and certificate key can be uploaded only as a file in DER or PEM format.

    To delete the certificate file or certificate key, click the button in the corresponding field. To save the certificate file or certificate key on your computer, click the button in the corresponding field.

12. If it is necessary to use a secure connection and a self-signed certificate is installed on the OPC UA server, add the root certificate for the OPC UA server using the Browse button under the OPC UA server CA certificate setting.

    To delete the certificate file, click the button. To save the certificate file on your computer, click the button.

13. In the Historical data interval (sec) field, specify the time interval (in seconds) for which the OPC UA Connector requests historical data stored on the OPC UA server.

    Enter 0 if you do not need to download historical data. Enter -1 if you need to download all historical data.

    If Start of the historical data period and End of the historical data period are set, historical data is loaded for the specified period.

14. In the Start of the historical data period field, select the start date and time of the period for which you want to download data from the OPC UA server.
15. In the End of the historical data period field, select the end date and time of the period for which you want to download data from the OPC UA server.
16. In the Size of historical data block sent by OPC UA server (numvalues parameter) field, specify the number of tags values that will be transmitted in the historical data block sent to the OPC UA Connector from the OPC UA server.

    The specified value affects the number of iterations for sending historical data to OPC UA Connector according to the total number of observations for tags received from the OPC UA server.

17. In the Size of historical data block sent to Message Broker service field, specify the number of tags that will be transmitted in the historical data block sent from the OPC UA Connector to the Message Broker service.

    The specified value affects the number of iterations for sending historical data to Message Broker according to the total number of observations for tags recieved via OPC UA Connector.

18. Click the Save button.