Are you trying to start the application in a "server machine" that doesn't have a display? The application isn't designed for such environments, it will fail to start without the display. All interactions with the application are designed to be done via the UI. Technically the installer works in cli due to it being made with install4j, but the app does not.

Now then, there is a "non-official flag"

--headless

(or -h) that will disable the UI module, then most likely it manages to start, but then you run with default configuration. Technically you might be able to get something if you copy some of the configuration files from another machine that has a display (though note that the application's own certificate has to be the one generated on that machine by the application), but any failures due to this or editing the files manually is outside of the scope of support.

Once the application manages to start, you will find configuration, logs etc. at /home/USER/.prosysopc/prosys-opc-ua-simulation-server/ for the USER who started the app. Note that there is no intended way to shut down the application properly without the UI (but things shouldn't go bad if you just terminate it).

root 2061929 0.0 0.0 2776 1792 pts/0 S 10:17 0:00 /bin/sh -c nohup "/opt/prosys-opc-ua-simulation-server/UaSimulationServer" > /dev/null 2>&1
root 2061930 1.4 6.8 3817428 275332 pts/0 Sl 10:17 0:14 /opt/prosys-opc-ua-simulation-server/jre/bin/java -Djava.library.path=C:/workaround_javafx11_non_existing_folder -classpath /opt/prosys-op

But it seems 53530 port isn’t listening netstat -tulnp | grep 53530

1. Is opcua simulation server running properly ？

2. How may I change the default port？

3. Is there any configuration file in Linux opcua simulation server？

4. How to tail -f logs/simulation-server.log？

Appreciate your support.
Vincent Lin

If you're on Windows, you can also use Resource Monitor's Network tab to check which TCP ports are in use.

Some other application could have taken the port.

If you are on Windows, please also see https://forum.prosysopc.com/fo.....ine/#p7039 , copied below:
Hyper-V (and possibly some other software) does reserve some ports on Windows.
See https://stackoverflow.com/ques.....on-windows see the first 2 answers (in the second one there is “netsh int ip show excludedportrange protocol=tcp”), that should hopefully be able first see that the port was reserved (explains the issue) and then adding it to the excludes causes it to not be reserved anymore (you probably need to restart after adding the port number to the excludes).

When I lunch OPC UA Simulation Server, I have the error: "ERROR: Failed to initialize server endpoint: opc.tcp://.....".

I do not have another instance running on my laptop.
I checked the log file "simulationserver.log" : "Caused by: java.net.BindException: Address already in use: bind"

How should I fix the issue?

Best regards,
Valentin

As to why I want to read from a simulation server, configuring an Allen Bradley as a OPC Client is a VERY new feature. I just want to test and understand how it works and this seemed like a viable option. There are certainly other ways of getting my end goal accomplished but if I can understand how this new feature works it could save money on hardware.

Walks09

When you say that the PLC "does not communicate with ProSys OPC Sim Server" what exactly do you mean? Has it not been able to connect and create and activate a Session or is it just not able to read data after connecting?

In Simulation Server's Expert Mode, which can be enabled from Options, you can use Sessions, Connection Log and Req/Res Log tabs to monitor connections from Clients. Sessions and Connection Log tabs can be used to check if a Client has successfully connected to the Server. Req/Res Log tab can be used to see the requests sent by the Client to Simulation Server and the responses sent by Simulation Server to the Client.

If the Session from the Client doesn't appear in Sessions or Connection Log tabs, you can use the Req/Res Log tab to check why creating and activating a Session fails. To use the Req/Res Log tab, you need to select the Active check box on the upper left corner of the tab. We recommend that you don't have any other Clients connected to Simulation Server while debugging with the tab to avoid including their requests in the log. You should see requests like CreateSession and ActivateSession in the log when attempting to connect with your Clien after you have activated the logging.

If nothing is appearing in the log when your Client attempts to connect, it means that it has not been able to create a SecureChannel with Simulation Server. In that case, you can either take a look at Simulation Server's log (see the user manual for more information on its location in your file system) or you can use Wireshark. See https://www.prosysopc.com/blog.....wireshark/ for instructions on how to capture OPC UA communication with Wireshark. If you're running the applications on the same host, remember to select "Support loopback traffic" option when installing Wireshark. You can send the log and/or the Wireshark capture to simulation-server-support@prosysopc.com so that we can take a look.

If the Client has been able to create and activate a Session but fails to read data, then you can use Req/Res Log tab to see how Simulation Server responds to the Clients requests. You can click on Filter by type button to open a list of different requests types. If the Client is reading the values directly from Nodes, you can unselect everything except for Read. If the Client is subscribing to the values via Subscriptions and MonitoredItems, you can unselect everything except for CreateMonitoredItems, CreateSubscription, DeleteMonitoredItems, DeleteSubscription, ModifyMonitoredItems, ModifySubscription, Publish, Republish, SetMonitoringMode and SetPublishingMode. Note that you do not have to filter the requests, but it can be helpful if there are many unrelated requests, though in this case there might not be such requests.

Out of curiosity, why would your PLC need to read data from Simulation Server? Can you tell about your use case briefly if it is something you can share on a public forum?

-QA67232
-QA67231

I've followed the documents provided by Rockwell with no luck. I have tried using the provided program from the knowledge base ID: QA67232. For now, I am only trying to read a single (DINT) tag that is generated from my ProSys OPC UA simulation server.

In short, I have 1 OPC UA server and 2 Clients
Server
- ProSys Simulation server
Clients
- UaExpert OPC Client (Successful connection to ProSys server)
- 1756-L82ES PLC (Unsuccessful connection to ProSys server)

My current test environment is as follows,
- PLC – 1756-L82ES (Does not communicate with ProSys OPC Sim Server, I am using the same Endpoint URL as my UaExpert Client)
- Firmware 36.11
- Studio 5000 v36.11
- OPC UA server – ProSys OPC UA Simulation server (free version)
- United Automation UaExpert Client (used as an extra client to test the connection to the server) – This works. I can see data in UaExpert coming from the ProSys OPC
server
- RS Linx Classic Gateway v4.40
- I used the OPC test through RSlinx and confirmed that the OPC connection from RSlinx to my PLC works. So I think this at least proves that my OPC comms are
enabled in the PLC. However, I still can not read any actual data in the PLC from the ProSys OPC simulation server.

Any help is appreciated!
Walks09

Most likely what happened:

You tried to connect using the user-cert, and that failed? Then after that you added the user-cert (as .der file, others might not work) to the USERS_PKI/CA/certs?

Assuming yes to above, then then the cert is in 2 places. We would have stored it in the 'rejected' folder from the first connect attempt (the same works for the ApplicationInstanceCerts, but we do not yet have UI for user-certs). Then it would be in the 'certs' added by you. Thus, the cert is both trusted and rejected, and I decided at some point when we did some of the validation logic that in this case it is safer to assume it is rejected than trusted. Though, this whole concept should be redone as a "new certs" or something instead (and then everything not trusted is rejected i.e. that there would be no "rejected" folder per se). There is lots of historical legacy regarding the design.

Thus, basically all you should need to do, is to delete the user-cert from the rejected folder (or basically instead of copying the user-cert from elsewhere, you could have moved it from the rejected to the certs folder).

It is possible it was something else, but this would be the first thing to check.

```
asyncua.ua.uaerrors._auto.BadIdentityTokenRejected: "The user identity token is valid but the server has rejected it."(BadIdentityTokenRejected)

```
Any help ?

Thanks for asking.

The feature is not supported (at all, not even in the paid version). But we might consider that in the future. The nodes can only be added via the UI currently.

Do you have a specific use-case in mind where you would need this? Typically servers do not support this.

Our SDK-level can support that, but it is by default off as it is a security risk unless carefully access-controlled (e.g. so that no-one can delete e.g. the Server node).

i am trying to add nodes via client application (built using open62541 OPC UA plugin) to the ProSys OPC Simulation server but I am getting error (Bad Service Unsupported).

Later i tried to add nodes from UA Expert Client to the ProSys OPC Simulation Server but that didn't work as well.

I am using ProSYS OPC Simulation Free Edition. Does it support adding nodes from client?