Certificate requirements for Brokers
- Last UpdatedMay 15, 2026
- 1 minute read
- PI System
- PI System Connector 3 3.0
- Connectors
Broker communication requires trusted certificates to establish a secure, authenticated connection between the connector and the broker.
Both the connector and broker must trust each other’s certificates. Ensure the certificate is installed in the appropriate Trusted Root Certification Authorities store on each machine.
You can configure the certificate in the following ways:
-
Connector to Broker
-
Broker to Broker
When generating and using self-created certificates (not self-signed within the UI), you must have your Certificate Extensions set with the following:
-
Key Usage Extensions (2.5.29.37)
-
Client Authentication (1.3.6.1.5.5.7.3.2)
-
Server Authentication (1.3.6.1.5.5.7.3.1)
A certificate without these extensions will not display and cannot be selected in AVEVA PI System Connector 3 (PSC3).
See Configure the communication certificate for guidance on how to configure these certificates.