Export the OPC UA server certificate to the OPC UA client node

Export the OPC UA server certificate

1. Open the Windows Certificate Manager on the OPC UA server node.

   To open the Certificate Manager, either type “Manage Computer Certificates” in the Windows search box and select, or open the command prompt and run "certlm.msc."

2. In the tree view, expand the Personal node, then select on Certificates.

3. Locate the certificate “<computer name> ASB OPC UA Server”.

4. Right-click on the certificate and select ‘All Tasks\Export…”

   The Certificate Export Wizard opens.

5. Depending on type of certificates that your client application uses, you will need to export the certificate as one of two certificate file types:

   • .cer file, if the client uses the Windows Certificate Store

   • .der file, if the client uses file-based certificates.

   Even though the file extensions are different, the file formats are the same.

6. In the Certificate Export Wizard, select the following options.

   • Export Private Key: select “No, do not export the private key” (default), then select Next.

   • Export File Format: select either “DER encoded binary X.509 (.CER)” or “Base-64 encoded X.509 (.CER),” depending on the requirements of your client application. Make the selection, then select Next.

   • File to Export: enter a file name to export the Root CA, for example “c:\temp\<machine name> OPC UA Server.cer,” then select Next.

7. When the Export Wizard finishes, you may need to change the file extension of the certificate from “.cer” to “.der,” depending on what your client application is expecting. You will need to do this if your OPC UA Client application stores certificates in a specific folder, rather than in the Windows Certificate Store.