Import the OPC UA server certificate on the client computer

To complete the process of copying and installing the OPC UA server certificate to the OPC UA client node, you need to import the OPC UA Server certificate to the OPC UA client computer.

Each OPC UA client application has its own mechanism to manage certificates. Generally, an OPC UA client will use one of two mechanisms to manage certificates:

• Utilizing the Windows Certificate Store

• Storing certificates in a specified folder, defined by the OPC UA Client application.

Refer to the documentation for your OPC UA client applications for more details on how to import a server certificate.

Import a certificate into the OPC UA client windows certificate store

1. Copy the certificate file (<machine name> OPC UA Server.cer) to the OPC UA client node. Where you copy the file is not important.

2. Right click on the certificate file and select Install Certificate from the context menu.

   This opens the Certificate Import Wizard.

   Note: Administrator privileges are required to import the certificate.

3. In the Certificate Import Wizard, select the following options.

   • Store location: Select "Local Machine," then select Next.

   • Certificate store: Browse to "Personal," then select Next.

   • Completing the Certificate Import Wizard: Review the settings, then select Finish.

Copy a certificate to specified location on the OPC UA client

4. Copy the certificate file (<machine name> OPC UA Server.cer) to the folder that is specified by your OPC UA client applications. The following table shows the location of the certificate folder for a number of common OPC UA clients.
   

   OPC UA client	Manufacturer	Folder
   Datafeed OPC UA Client	Softing	C:\ProgramData\Softing\OpcClient\pki\trusted\certs
   UaExpert	UnifiedAutomation	C:\Users\Admin\AppData\Roaming\unifiedautomation\uaexpert\PKI\trusted\certs
   UA Client Getting Started	UnifiedAutomation	C:\ProgramData\unifiedautomation\UaSdkNetBundleEval\pkiclient\trusted\certs
   Matrikon	Matrikon	C:\Users\Admin\Appdata\Local\Matrikon\OPCUAExplorer\pki\DefaultApplicationGroup\trusted\certs
   KEPServer	Kepware	C:\ProgramData\Kepware\KEPServerEX\V6\UA\Client Driver\cert
   Top Server	Software Toolbox	C:\ProgramData\Software Toolbox\TOP Server\V6\UA\Client Driver\cert

   Refer to the documentation for the OPC UA client application for additional information about managing certificates.

5. Configure the OPC UA certificate, as described below.