IEC 62541-12:2025

Overview

IEC 62541-12:2025 - "OPC Unified Architecture – Part 12: Discovery and global services" (Edition 2.0, 2025) defines how OPC UA Clients and Servers discover one another and interact with discovery infrastructure. The standard specifies requirements and information models for LocalDiscoveryServer, LocalDiscoveryServer‑ME, and GlobalDiscoveryServer, and standardizes Certificate management, KeyCredential management and AuthorizationServices. Informative annexes cover deployment and configuration (Annex A), NodeSet and numeric NodeIds (Annex B), LDS installation rules (Annex F) and a comparison of certificate management with IETF RFC 7030 (Annex H).

Key topics and requirements

• Discovery architectures: Covers simple DiscoveryUrl usage, local discovery (multicast/subnet), multicast DNS considerations, global discovery and reverse connection discovery procedures.
• Discovery server roles: Requirements and workflows for LocalDiscoveryServer, LocalDiscoveryServer‑ME and GlobalDiscoveryServer including application registration, update and query operations.
• Certificate management: Information models and workflows for pull and push certificate management, trust lists, certificate groups and revocation/check processes.
• KeyCredential management: Models and services to request, deliver and revoke cryptographic credentials for devices and applications.
• AuthorizationServices: Models for requesting access tokens, configuring authorization services and auditing token issuance.
• Information models: NodeSets, service types and AuditEvent types for certificate/key/authorization operations; Annex B defines NodeSet and numeric NodeIds.
• Security & deployment: Roles, privileges, multicast DNS security considerations and installation rules (Annex F).
• Notable technical changes (2025 edition):
  • Addition of a Quantity Model for EngineeringUnit properties, alternative units and conversions.
  • New rules for ValuePrecision property (applicable to Duration, Decimal and negative-value handling).

Applications and who uses it

• Industrial automation vendors implementing OPC UA Servers/Clients and DiscoveryServers.
• System integrators building scalable discovery and PKI architectures across OT/IT boundaries.
• Device manufacturers adding secure enrollment, key provisioning and remote discovery support.
• Network architects & security teams deploying global discovery, reverse connections and certificate lifecycle management.
• Software vendors of OPC UA toolkits and IAM solutions integrating AuthorizationServices and access token flows.

Related standards

• IEC 62541 series (OPC UA family) - this part complements other parts that define core services, security, information models and transport.
• IETF RFC 7030 - compared with the standard’s certificate management in Annex H.

Keywords: OPC UA, DiscoveryServer, LocalDiscoveryServer, GlobalDiscoveryServer, certificate management, key credential, AuthorizationServices, Quantity Model, ValuePrecision.