Handling Client And Server Certificates - Siemens SIMATIC ET 200AL System Manual

9.3.3.5

Handling client and server certificates

A secure connection between the OPC UA server and an OPC UA client is only established
when the server can prove its identity to the client. This is done with the server certificate.
Certificate of the OPC UA server
When you have activated the OPC UA server and have confirmed the security prompts, STEP 7
automatically generates the certificate for the server and saves it in the local certificate
directory of the CPU. You can view and manage this directory with the local certificate
manager of the CPU (exporting or deleting certificates).
The figure below shows the local certificate manager of the CPU with the automatically
generated certificate for the OPC UA server:
Figure 9-19
Alternatively, you can also generate a server certificate yourself.
The certificate of the server is transferred from the server to the client during establishment
of a connection. The client checks the certificate.
Communication
Function Manual, 05/2021, A5E03735815-AJ
Local certificate manager of the CPU
OPC UA communication
9.3 Using the S7-1500 as an OPC UA server
227