Controller · Siemens

Connect SINUMERIK 828D

SINUMERIK 828D supports the Access MyMachine /OPC UA server (6FC5800-0AP67-0YB0) on interface X130, port 4840. PLC access through OPC UA is limited to customer data blocks from DB9000. Version compatibility follows the same table as the 840D sl; Manage MyMachines lists 828D from software 4.5 SP4.

At a glance

Native protocol	OPC UA server (licensed)
Licence	6FC5800-0AP67-0YB0
Port	TCP 4840
Interface	X130
PLC access	Customer DBs from DB9000 only
Gateways	Litmus lists no 828D driver; S7 gateways mainly target 840D

Connection paths

Native OPC UA serverRecommended

Same procedure as 840D sl, on X130.

Siemens Manage MyMachinesVendor product

828D with Integrate client 2.0.x to 4.0.x depending on software version.

Licences and options

Item	Option / part number	Paid?	Note
Access MyMachine /OPC UA	6FC5800-0AP67-0YB0	Paid

Ports

Port	Protocol	Note
`4840`	TCP	OPC UA on X130

Software versions

Same OPC UA server versions as 840D sl (4.5 / 4.07 / 4.08 / 4.92)
Manage MyMachines: 4.5 SP4–SP6 (PPU 2x1.3), 4.7 SP2–SP7 and 4.8 SP4–SP7, 4.94–4.95 SP4
The SINUMERIK ONE OPC UA manual covers 828D PPU "PU.5" only; older PPU types use the 840D sl/828D manual

Data you can read

Channel state: execution state, operating mode, active program name, block, line
Spindle: rotating, speed, load; feed rate and override
Alarms: event-based NC, PLC and HMI alarms with multilingual texts (needs the AlarmRead right)
R parameters, global user data (GUD) and NC variables by path, for example /Channel/Parameter/R[u1,10]
PLC data: /Plc/MB6, /Plc/DB5.DBW2, arrays such as /Plc/DB2.DBD0:REAL[10] (828D: customer DBs from DB9000 only)
Tools: tool data, cutting edges, magazine; methods to create and delete tools and cutting edges
Part counters (actual and total parts) and program selection (Select/Deselect methods with the ApWrite right)

Setting it up

Check the licence and software versionAccess MyMachine /OPC UA must be licensed and activated: order number 6FC5800-0AP67-0YB0 for 840D sl and 828D. Check the CNC software version against the compatibility table below before you order.
Use the right network interface828D: X130 (company network). 840D sl with thin client: X120 and X130 on the NCU. 840D sl with PCU or IPC: the server is reachable on eth1 and eth2 of the PC, not on X120/X130. Do not change the 192.168.214.x and 192.168.215.x system networks.
Raise the access levelEnter the Manufacturer access level so the commissioning screens are available.
Activate the serverStartup (Commissioning) > Network > OPC UA > Setting > Change. Choose the network (company, system or service), confirm IP address and port 4840, tick "Activate OPC UA", OK.
Create a user and rightsAnonymous access is off by default and should stay off. Create a user with a strong password (8 or more characters, mixed case, digits, special characters) and give it only the rights it needs, for example StateRead, ToolRead, AlarmRead.
RestartHardware restart of the NCU or PPU; on a PCU 50 or IPC, restart Operate.
Exchange certificatesStartup > Network > OPC UA > Certificates. The server certificate is generated at first start (20-year validity). Import the client certificate (.der) and trust the HMI certificate on the client side. Switch off automatic certificate acceptance once commissioning is done.
Verify with a generic clientConnect with UaExpert to opc.tcp://<HMI-IP>:4840 using Basic256Sha256 Sign & Encrypt, browse, read a channel state, then hand over to the production client.

Free commissioning pack for this control →

Troubleshooting

Symptom	Likely cause	Fix
BadCertificateTimeInvalid	System time wrong on the control or the client	Set the clock on both sides (NTP where possible), then reconnect.
BadSecurityChecksFailed	Client certificate not trusted by the server	Move the client certificate to the trusted list under Startup > Network > OPC UA > Certificates.
Endpoint not reachable on 840D sl with PCU	Client is dialling X120/X130	With a PCU or IPC the server listens on eth1/eth2 of the PC; open TCP 4840 in the PC firewall.
Login works, every read is denied	New users have no rights	Grant the needed rights (StateRead, AlarmRead, ToolRead, PlcRead…) with the admin user.
828D cannot read a PLC data block	828D exposes customer data blocks from DB9000 only	Ask the PLC programmer to copy the values into a DB at or above DB9000.
Security None endpoint missing	Only 256-bit policies are active by default	Keep it that way in production; enable None only temporarily for a reachability test if your site policy allows it.

Traps to avoid

Only DB9000 and above are reachable for PLC data: plan the PLC interface with the builder.
828D V4.5 has its own exceptions in the configuration dialog; follow the manual chapter for that version.

Connectors that support this control

Product	Vendor	Type	Outputs
Manage MyMachines	Siemens	Control or machine maker	Cloud (Insights Hub)
Connectware	Cybus	Edge platform	MQTT, OPC UA server
WebAccess/CNC	Advantech	Monitoring software	OPC UA/DA, Modbus, REST
StateMonitor	HEIDENHAIN	Control or machine maker	ERP/MES job interface
FactoryWiz Monitoring	FactoryWiz	Monitoring software	—
Predator MDC	Predator Software	Monitoring software	SQL / MES / ERP

CNC connector directory →

Not published by the vendor. We could not find these in vendor documentation. Ask the control or machine maker before you rely on them.

Maximum client count

Questions engineers ask

Does the 828D have OPC UA?

Yes, with the Access MyMachine /OPC UA licence, on X130, port 4840.

SINUMERIK 840D sl SINUMERIK ONE SINUMERIK OPC UA (Access MyMachine /OPC UA)

Sources

Facts on this page come from these documents, opened on 27 October 2026.

Last verified 27 October 2026 against vendor documentation. OPC UA Connect is an educational resource published by TEEPTRAK; it is not affiliated with the OPC Foundation, the MTConnect Institute or any control maker.