<?xml version="1.0"?>
<OpcServerConfig xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
	<UaServerConfig>
		<!--Trace configuration
            This part of the configuration defines the trace settings for OPC UA Stack and OPC UA Application.-->
		<Trace>
			<!--Enable UA stack trace true/false-->
			<UaStackTraceEnabled>true</UaStackTraceEnabled>
			<!--UA stack trace level. Possible values NONE, ERROR, WARNING, SYSTEM, INFO, DEBUG, CONTENT, ALL
                NONE    - No Trace
                ERROR   - Critical errors (unexpected and/or requiring external actions) which require attention
                WARNING - Non-critical faults which should not go unnoticed but are handled internally
                SYSTEM  - Rare major events (good cases) like initializations, shut-down, etc.
                INFO    - Regular good case events like connects, renews
                DEBUG   - Used for debugging purposes
                CONTENT - Used to add additional content (i.e. whole message bodies) to debug traces
                ALL     - All
            -->
			<UaStackTraceLevel>ERROR</UaStackTraceLevel>
			<!--Enable UA server application trace true/false-->
			<UaAppTraceEnabled>true</UaAppTraceEnabled>
			<!--UA server application trace level. Possible values NoTrace, Errors, Warning, Info, InterfaceCall, CtorDtor, ProgramFlow, Data
                NoTrace       - No Trace
                Errors        - Unexpected errors
                Warning       - Unexpected behaviour that is not an error
                Info          - Information about important activities like connection establishment
                InterfaceCall - Calls to module interfaces
                CtorDtor      - Creation and destruction of objects
                ProgramFlow   - Internal program flow
                Data          - Data
            -->
			<UaAppTraceLevel>Errors</UaAppTraceLevel>
			<!--Maximum number of trace entries in one file-->
			<UaAppTraceMaxEntries>10000</UaAppTraceMaxEntries>
			<!--Maximum number of backup files-->
			<UaAppTraceMaxBackup>1</UaAppTraceMaxBackup>
			<!--Do not flush the file after each trace entry. The trace file gets flushed automatically from time to time anyway.
                - For maximum trace performance you should set this option to true.
                - If you have issues with missing trace entries in case of an application crash, you should set this option to false. -->
			<UaAppTraceDisableFlush>false</UaAppTraceDisableFlush>
			<!--Trace file
          [CommonAppData] or [CommonDocuments] can be used as placeholder for the system path
          [ApplicationPath] can be used as placeholder for the application path.
          [WinCCProjectFolder] can be used as placeholder for the WinCC project folder.
               - [WinCCProjectFolder]\OPC\UAServer\Trace\[ModuleName].log 
               - [CommonAppData]\Siemens\WinCC\OPC\UaServer\Trace\[ModuleName].log
               - [CommonDocuments]\Siemens\WinCC\OPC\UaServer\Trace\[ModuleName].log
               - [ApplicationPath]\Trace\[ModuleName].log-->
			<UaAppTraceFile>[WinCCProjectFolder]\OPC\UAServer\Trace\[ModuleName].txt</UaAppTraceFile>
			<!--Trace event options. Possible values Disabled, History, HistoryAndEvents-->
			<TraceEvents>Disabled</TraceEvents>
			<!--Enable PubSub stack trace true/false-->
			<PubSubStackTraceEnabled>false</PubSubStackTraceEnabled>
		</Trace>
		<!--Trace configuration end-->
		<UaEndpoint>
			<Url>opc.tcp://[NodeName]:4862</Url>
			<!--<SecuritySetting>
        <SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#None</SecurityPolicy> 
        <MessageSecurityMode>None</MessageSecurityMode>
      </SecuritySetting>-->
			<!-- The SecurityPolicy Basic128Rsa15 is deprecated and is no longer considered secure.
                 It is up to an administrator to enable it for backward compatibility.
            -->
			<!--<SecuritySetting>
        <SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15</SecurityPolicy>
        <MessageSecurityMode>Sign</MessageSecurityMode>
        <MessageSecurityMode>SignAndEncrypt</MessageSecurityMode>
      </SecuritySetting>-->
			<!-- The SecurityPolicy Basic256 is deprecated and is no longer considered secure.
                 It is up to an administrator to enable it for backward compatibility.
            -->
			<!--<SecuritySetting>
        <SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#Basic256</SecurityPolicy>
        <MessageSecurityMode>Sign</MessageSecurityMode>
        <MessageSecurityMode>SignAndEncrypt</MessageSecurityMode>
      </SecuritySetting>-->
			<SecuritySetting>
				<SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#Aes128_Sha256_RsaOaep</SecurityPolicy>
				<!--<MessageSecurityMode>Sign</MessageSecurityMode>-->
				<MessageSecurityMode>SignAndEncrypt</MessageSecurityMode>
			</SecuritySetting>
			<SecuritySetting>
				<SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#Aes256_Sha256_RsaPss</SecurityPolicy>
				<!--<MessageSecurityMode>Sign</MessageSecurityMode>-->
				<MessageSecurityMode>SignAndEncrypt</MessageSecurityMode>
			</SecuritySetting>
			<!--<SecuritySetting><SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15</SecurityPolicy><MessageSecurityMode>Sign</MessageSecurityMode><MessageSecurityMode>SignAndEncrypt</MessageSecurityMode></SecuritySetting>-->
			<!--<SecuritySetting><SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#Basic256</SecurityPolicy><MessageSecurityMode>Sign</MessageSecurityMode><MessageSecurityMode>SignAndEncrypt</MessageSecurityMode></SecuritySetting>-->
			<SecuritySetting>
				<SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256</SecurityPolicy>
				<!--<MessageSecurityMode>Sign</MessageSecurityMode>-->
				<MessageSecurityMode>SignAndEncrypt</MessageSecurityMode>
			</SecuritySetting>
			<!--<SecuritySetting><SecurityPolicy>http://opcfoundation.org/UA/SecurityPolicy#None</SecurityPolicy><MessageSecurityMode>None</MessageSecurityMode></SecuritySetting>-->
		</UaEndpoint>
		<UserIdentityTokens>
			<!--Enable anonymous login true/false-->
			<EnableAnonymous>false</EnableAnonymous>
			<!--Enable user/password login true/false-->
			<EnableUserPw>true</EnableUserPw>
			<!--Enable certificate based user login true/false-->
			<EnableCertificate>true</EnableCertificate>
		</UserIdentityTokens>
		<FastInsert>
			<EnabledByDefault>true</EnabledByDefault>
			<Users>
				<!--
         <User>domain\user1</User>
         <User>domain\user2</User>
         -->
			</Users>
			<Clients>
				<!--
         <Client>ClientName1</Client>
         <Client>ClientName2</Client>
         -->
			</Clients>
		</FastInsert>
	</UaServerConfig>
</OpcServerConfig>
