OPC UA Client Application Instance Certificate | OPC UA Standard | Forum

Lost password?

Home Forum OPC UA Standard OPC UA Client Application Instance …

OPC UA Client Application Instance Certificate

prabhakaran prabs

Member

Members

Forum Posts: 52

Member Since:
01/07/2022

Offline

07/28/2024 - 23:04

Hi,

I have developed OPC UA SERVER application using CSharp(C#) language.

I have a requirement,

OPC UA Client shall use a tokenType of ANONYMOUS indicates that the Server does not require any user identification. In this case, the Client Application Instance Certificate is used as the user identification.

What is Client Application Instance Certificate?

How to send Client Application Instance Certificate to OPC UA Server by using UAExpert?

How to achieve this in UAExpert?

Randy Armstrong

Admin

Forum Posts: 1549

Member Since:
05/30/2017

Offline

07/28/2024 - 23:27

UAExpert automatically sends the Application Certificate to the Server when it connects.

It cannot connect if the Server is not configured to trust the Client certificate.

prabhakaran prabs

Member

Members

Forum Posts: 52

Member Since:
01/07/2022

Offline

07/29/2024 - 05:00

Hi,

Thanks for your reply.

Suppose, if client wants to use application instance certificate issued by “Certification Authority” instead of client sends application instance certificate to server implicitly.

So where do we need to maintain/copy the “CLIENT application instance certificate” issued by Certification Authority in following UAExpert PKI folders.

pki\own
pki\issuer
pki\trusted
pki
ejected
pki\issuerUser
pki\trustedUser

Our requirement is, OPA UA Client has to send the application instance certificate(X .509)( issued by Certification Authority) to OPC UA Server in “Anonymous User Identity Token” policy.

Randy Armstrong

Admin

Forum Posts: 1549

Member Since:
05/30/2017

Offline

07/30/2024 - 00:13

You can use the UAExpert UI to set a new Certificate.

You should not manipulate the file system directly.