Siemens SIMATIC S7-1500 Function Manual page 274

Creating an OPC UA Client certificate
The easiest way to generate a client certificate for an S7-1500 CPU is to configure a client
interface.
The configuration of the client interface provides for the selection or generation of a client
certificate, see Creating and configuring connections (Page 268).
Alternatively, you can generate the client certificate as follows:
1. In the project tree, select the CPU you want to use as a client.
2. Double-click "Device configuration".
3. In the properties of the CPU, click "Protection & Security > Certificate manager".
4. Double-click "<Add new>" in the "Device certificates" table.
STEP 7 opens a dialog.
5. Click the "Add" button.
6. Select the "OPC UA client" entry from the "Usage" list.
7. Click "OK".
STEP 7 now shows the client certificate in the "Device certificates" table.
8. If the server is in another project: Right-click this line and select "Export certificate" from
the shortcut menu.
9. Select a directory where you will store the client certificate.
Communication
Function Manual, 11/2019, A5E03735815-AH
9.4 Using the S7-1500 CPU as an OPC UA client
OPC UA communication
273