Certificate Management

To open Certificate Management, go to the menu“Certificates > Certificate management”. Here, you can import certificates, create your own, and view existing ones. Imported certificates are then available in the selection lists of the individual plug-ins.

Use the "Store:" field to limit the display to a single certificate store; the default is "Alle Stores." The grid below shows, for each certificate, the applicant, DNS name, issuance and expiration dates, serial number, fingerprint, and source.

The two tabs

The management interface is divided into two tabs, and each contains different buttons.

OPC Router Certificates

The “OPC Router Certificates” tab displays the certificates that the OPC Router uses to authenticate itself.

Button	Function
“Import”	Imports a certificate from your computer into Certificate Management.
“Export”	Saves the selected certificate to a file.
“Show”	Displays details and the path of the selected certificate.
“Add private key”	Adds the private key that will later be used to sign the encrypted connection. You create this key yourself and do not share it with anyone.
“Delete”	Deletes the selected certificate from the list.
“Create”	Creates a custom certificate. Enter the properties and confirm.

Trusted Certificates

The “Trusted certificates” tab lists the certificates of the remote parties that the OPC Router trusts.

Button	Effect
“Import”	Adds a third-party certificate to the list.
“Show”	Displays details and path of the selected certificate.
“Delete”	Deletes the selected certificate from the list.
“Trust”	Marks the selected certificate as trusted.

note

Creating and adding a private key is only available for OPC Router certificates, not for trusted certificates—which is why these two buttons are missing from the second tab.

The second sub-entry in the menu, “Certificates via OPC UA GDS”,” establishes a connection between the OPC Router and a Global Discovery Server instead; this is described on the page “Certificate Management via OPC UA GDS.”