Log In
Home
01/07/2022
Offline
Hi,
I have developed OPC UA SERVER application using CSharp(C#) language.
I have a requirement,
OPC UA Client shall use a tokenType of ANONYMOUS indicates that the Server does not require any user identification. In this case, the Client Application Instance Certificate is used as the user identification.
What is Client Application Instance Certificate?
How to send Client Application Instance Certificate to OPC UA Server by using UAExpert?
How to achieve this in UAExpert?
05/30/2017
Offline
UAExpert automatically sends the Application Certificate to the Server when it connects.
It cannot connect if the Server is not configured to trust the Client certificate.
01/07/2022
Offline
Hi,
Thanks for your reply.
Suppose, if client wants to use application instance certificate issued by “Certification Authority” instead of client sends application instance certificate to server implicitly.
So where do we need to maintain/copy the “CLIENT application instance certificate” issued by Certification Authority in following UAExpert PKI folders.
pki\own
pki\issuer
pki\trusted
pki
ejected
pki\issuerUser
pki\trustedUser
Our requirement is, OPA UA Client has to send the application instance certificate(X .509)( issued by Certification Authority) to OPC UA Server in “Anonymous User Identity Token” policy.
05/30/2017
Offline
You can use the UAExpert UI to set a new Certificate.
You should not manipulate the file system directly.
01/07/2022
Offline
Yes, it is correct, Unexpert automatically sends the Application Certificate to the Server when it connects.
Now I want to validate the client application instance certificate in OPC UA Server.
When UAExpert sends the application instance certificate to OPC UA Server in anonymous token policy, in server side X509IdentityToken x509Token object is getting null value.
How to validate the client application instance certificate in OPC UA Server?
05/30/2017
Offline
This is done automatically by the SDK. You simply need to ensure your server is configured to trust the UAExpert certificate by adding the Certificate to the Server trust list.
In UA there are 2 levels of authentication:
1) Application
2) User
This exists because in OT users are only allowed to do tasks using verified software so the double authentication prevents users from using unverified applications.
X509IdentityToken are used for user authentication which is not used with an anonymous token policy.
1 Guest(s)
Usage Policy