Using the Self-Signed Certificate and Key Pair

You can rename the certificate and private key files you created with the steps outlined in Creating an OPC UA Client Service Instance. The certificate and keys are created in \certs and \private subdirectories under the Store Path you specified.

• You can rename the certificate file to an easily managed name, but you must maintain the ".der" filename extension. For example, UAClient.der.

• You can rename the key file to an easily managed name, but you must maintain the ".pfx" filename extension. For example, UAClient.pfx.

• You also can retain the filenames generated by the certificate and pair creation process.

To use the self-signed certificate and key pair

1. Copy the certificate file, UAClient.der in this example, from your C:\...\certs directory into the path %CommonApplicationData%\<Application Name>\CertificateStores\OPCUAClient\certs on every computer on which you want to deploy the OPC UA Client service instance.

   For example, the application name might be ArchestrA in the file path.

   By doing this, you have replaced the file with same name in that directory.

   Note: The path to store program data is %CommonApplicationData%. By default, this location is C:\ProgramData\.

2. Copy the private key file, UAClient.pfx in this example, from your C:\...\private directory into the path %CommonApplicationData%\ <Application Name>\CertificateStores\OPCUAClient \private on every computer on which you want to deploy the OPC UA Client service instance.

   For example, the application name might be ArchestrA in the file path.

   By doing this, you have replaced the file with the same name in that directory

   Note: The path to store program data is %CommonApplicationData%. By default this location is C:\ProgramData\.

3. On the computer where the targeted OPC UA Server may be running, copy the certificate file UAClient.der from your C:\...\certs directory into the directory where you want to add the trusted cert for the OPC UA Server.

4. Deploy the UA Client service instance to the node.