Configuring Server and Client Certificates for Third-Party OPC UA Client Applications

IMPORTANT! These procedures apply ONLY if you are using a third party OPC UA client. If you are using OI Gateway as the OPC UA client, skip to Using OI Gateway to Configure the Client Security Certificate.

To configure encrypted communications between the System Platform OPC UA server and a third-party OPC UA client, both computers will need access the following certificates:

• <Computer Name> ASB OPC UA Server

• The client certificate from your OPC UA client.

To complete this setup, you will need to perform three steps:

1. Copy the certificate from the OPC UA server node to the OPC UA client node. This step includes the following:

   • Exporting the OPC UA server certificate.

   • Installing the certificate on the client node.

2. Copy the certificate from the OPC UA client node to the OPC UA server node.

3. Make sure that the firewall has been configured to allow the ArchestrA.OPCUA.ServiceHost.exe application.