Problem with SimSci-Esscor OPC UA Server 1.3

[hasann@cruxocm.com]

I am trying to connect to AVEVA Simci OPC UA server 1.3 based on their instruction. But when I setup the server and try to connect I get an error below
"
Connection status of server 'SimSci OPC UA Server 1.3' changed to 'Disconnected'.
Endpoint: 'opc.tcp://localhost:62551/simsci/SimUAServer1.3'
Security policy: 'http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15'
ApplicationUri: 'urn:localhost:simsci:SimOpcUAServer'
Used UserTokenType: Anonymous
Error 'BadConnectionClosed' was returned during OpenSecureChannel
Connection status of server 'SimSci OPC UA Server 1.3' changed to 'Disconnected'.

"

Can please let me what's the issue?

[Support Team]

Hi,

there might be multiple issues with the AVEVA UA Server.

1) the security policy "Basic128Rsa15" is old, outdated and was deprecated by the OPC Foundation.
2) this old security policy has used signature SHA1 which is also outdated and deprecated.
3) this old security policy has used key length of (only) 1024bit, whereas 2048bit (or 4096) is the default today.
4) in case of using very old OpenSSL there might be additional glitches.

The UaExpert allows the use of the old and outdated security policies, but will show "WARNING" on first contact with server using this old policy, and will "ASK" the user to accept the faulty/outdated policy. However the default certificate of the UaExpert itself, the clientside certificate, is (of course) created for the new/latest policies (using SHA256 and key length 2048bit), which maybe the AVEVA can not deal with (for secured connection you need to trust on both sides).

Hint: You must check on the server side why the Aveva UA Server is (actively) closing the connection. The detailed error description is not transferred over the wire, hence you must check with the Aveva to look into trace and error log on the server side.