Opc Ua Server; Generate Server Certificate - Softing dataFEED Series User Manual

dataFEED Gateway - User Manual

4.2 OPC UA Server

The OPC UA Server view provides the means to configure the OPC UA Server of the device. This page provides
the following information:
Endpoint URI
OPC UA endpoint URI
Endpoint URI using different formats (host name, IP address, IPv4, IPv6), depending on used network
configuration
The string is read-only. For easy configuration of your OPC UA Client copy this URI and paste it into the
appropriate field of your OPC UA Client configuration.
See IT Network Configuration
Port
Port number of internal OPC UA Server
The allowed range for the port number setting is 1024 ... 65535. The default value is 4840.

4.2.1 Generate Server Certificate

The Generate Server Certificate view deals with the details of the OPC UA Server certificate in the dataFEED
Gateway.
Certificate details
The user entries in the input fields Country code (two letters), Location, State, Organization, Department,
Common name, E-mail address and Validity period of certificate that is generated (days) are used to create a
certificate for the OPC UA Server.
The input field Validity period of certificate that is generated (days) allows you to determine the duration for
which the generated certificate is valid. The validity period starts with the current system time and ends after
the number of days given in this field . Make sure you have configured the system time correctly before
generating the OPC UA Server certificate (refer to
The default setting of this field is not derived from the current certificate.
Click the Generate Server Certificate button to create a new self-signed OPC UA Server certificate in the dataFEED
Gateway.
CA signed Certificate
It is also possible for network administrators to use their own certificate authority for signing the generated OPC
UA server certificate.
To do so, download the certificate request file using the OPC-UA-Certificate_req.pem button and send it to your
certificate authority to generate the signed certificate file. Afterwards upload this certificate file into the device
using the Upload CA signed server certificate file dialog.
Download Server Certificate
The certificate can be downloaded from the device in PEM or DER format using the OPC-UA-certificate.pem
respectively OPC-UA-certificate.der buttons.
Note
The certificate generated here is also valid for the web server. The web server will use the newly
generated certificate after the next reboot.
12
11
for additional information regarding the shown IPv6 information
Time Settings
36
for details).
© Softing Industrial Automation GmbH