Siemens SIMATIC ET 200AL System Manual page 1466

Alternatively, you can generate the client certificate as follows:
1. In the project tree, select the CPU you want to use as a client.
2. Double-click "Device configuration".
3. In the properties of the CPU, click "Protection & Security > Certificate manager".
4. Double-click "<Add new>" in the "Device certificates" table.
STEP 7 opens a dialog.
5. Click the "Add" button.
6. Select the "OPC UA client" entry from the "Usage" list.
7. Click "OK".
STEP 7 now shows the client certificate in the "Device certificates" table.
8. If the server is in another project: Right-click this line and select "Export certificate" from the
shortcut menu.
9. Select a directory where you will store the client certificate.
2. Announcing the client certificate to the server
You have to make the client certificate available to the server to allow a secure connection to
be established.
Communication
Function Manual, 05/2021, A5E03735815-AJ
9.4 Using the S7-1500 CPU as an OPC UA client
OPC UA communication
345