"User Token - Kerberos Client Facet" Profile

 Description This Facet indicates that the use of binary Kerberos tickets to identify users is supported.
 URI http://opcfoundation.org/UA-Profile/Security/UserToken-Client/Kerberos

This page lists the conformance units of the selected profile with their name and description.
Conformance units that are inherited via included Profiles are not listed by default. Use the following radio buttons to change this default behaviour.






Security
Include  Name Opt.  Description  From Profile
Security User Binary Kerberos Ticket Client The Client uses a binary Kerberos ticket for user identity.
The token will be encrypted if required by the security policy of the User Token Policy or by the security policy of the endpoint. An unencrypted token either requires message encryption or means outside the scope of OPC UA to secure the identity token so that it cannot be retrieved by sniffing the communication. One option would be a secure transport like a VPN.