OPC UA Application Instance Certificate|OPC UA Standard|Forum|OPC Foundation

Avatar
Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
Lost password?
sp_Feed sp_PrintTopic sp_TopicIcon
OPC UA Application Instance Certificate
Avatar
prabhakaran prabs
Member
Members
Forum Posts: 52
Member Since:
01/07/2022
sp_UserOfflineSmall Offline
1
07/24/2024 - 03:46
sp_Permalink sp_Print

Hi,

I have developed OPC UA SERVER application using CSharp(C#) language.

I have one requirement,

"OPC UA Client shall use Application Instance Certificate (X.509) certificate to connect to OPC UA Server by Anonymous User Token Policy"

I want to know about

why do we need to send certificate in Anonymous User Token Policy? normally certificate token policy only we are sending certificate.

what is Application Instance Certificate (X.509)?

what is the different between Application Instance Certificate (X.509) and self-signed certificate?

How to create Application Instance Certificate (X.509) in client side?

Avatar
Randy Armstrong
Admin
Forum Posts: 1537
Member Since:
05/30/2017
sp_UserOfflineSmall Offline
2
07/24/2024 - 15:58
sp_Permalink sp_Print

There are 2 levels of authentication in OPC UA: application and user.

Permissions are granted based on the combination of application and user credentials.

This allows factory operatorsto control what applications/computers are used to connect to servers. i.e. a user with permission to change set points may be able to connect to the server via an app on a iphone but can only change set points when they are using the HMI panel physically attached to the machine running the server even though the user credentials are the same.

Anonymous User Token Policy means no user credentials are provided.

Avatar
prabhakaran prabs
Member
Members
Forum Posts: 52
Member Since:
01/07/2022
sp_UserOfflineSmall Offline
3
07/25/2024 - 01:46
sp_Permalink sp_Print

How to create application instance certificate in OPC UA Client.

My requirement is,

To connect OPC UA Server, need to send OPC UA Client application instance certificate through Anonymous User Token Policy to OPC UA Server.

Requirement:

When the Application instance Client Certificate presented on a TCP communication channel is found trustworthy the OPC UA server shall validate that the Client identified by that Client Certificate is Authorized to access OPC-UA Server services according to the “Anonymous User Identity Token” Policy.

Avatar
Randy Armstrong
Admin
Forum Posts: 1537
Member Since:
05/30/2017
sp_UserOfflineSmall Offline
4
07/28/2024 - 23:25
sp_Permalink sp_Print

The SDK you are using should have sample clients that include calls to create an Application Certificate automatically on start up.

Forum Timezone: America/Phoenix
Most Users Ever Online: 510
Currently Online:
Guest(s) 7
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Forum Stats:
Groups: 2
Forums: 10
Topics: 1415
Posts: 4778