7.7.5 Server settings - Certificate
A secure connection between the
OPC UA
client and the server can only be established
if the server classifies and accepts the client's digital certificate as trusted. Currently, the
server accepts every valid client certificate. The server accepts self-signed certificates. In
addition, the client also checks the server's certificate.
Here you can create, show, import or export an ITU-T standardized X.509 certificate for
the
OPC UA
server. The certificate shown here is transferred into the
OPC UA
server.
1.
Under
Project tree
at
‘OPC UA configuration’
click on
‘Server settings’
.
ð
The
‘Server settings’
editor opens.
2.
Select the area
‘Certificate’
.
The current X.509 certificate is shown in the work space. If you create or import a new
certificate, the previously shown certificate is replaced.
Create new certificate:
Opens the dialog window
‘Create new certificate’
Display certificate:
Shows information on the current certificate
Export certificate:
Opens the dialog window
‘Save certificate’
Import certificate:
Opens the dialog window
‘Open certificate’
1.
Click on to create a new certificate.
ð
The dialog window
‘Create new certificate’
opens.
2.
Enter the data for the certificate and click on
‘OK’
.
ð
The previously shown certificate is replaced by the new certificate.
Click on to show information about the current certificate.
ð
The dialog window
‘Certificate’
opens.
You can export the current certificate e.g. to use it on different computers.
1.
Click on .
ð
The dialog window
‘Save certificate’
opens.
2.
Select a directory and enter a file name.
3.
Click on
‘Save’
.
ð
The current certificate is saved in the export file (pfx file format).
You can import a certificate, e.g. to use it for the current
OPC UA
configuration. For a
successful import, the certificate must have the following characteristics:
n
The certificate must be available as a PFX file.
n
The
‘Common name’
and
‘Organization’
fields must be completed.
Toolbar
Create new certificate
Display certificate
Export certificate
Import certificate
VIPA System SLIO
Deployment OPC UA
Usage OPC UA Configurator > Server settings - Certificate
HB300 | CPU | 013-CCF0R00 | en | 19-30
205
