Server Certificate - Mitsubishi Electric MELSEC iQ-F FX5 User Manual

Server certificate

In the [Server Certificate] tab of OPC UA Module Configuration Tool, the certificate of an FX5-OPC can be checked and set.
Displayed items
Item
Current Certificate Certificate list
Display
[Refresh Display] button
[Export Certificate] button
[Get a CSR] button
Online Operations [Generate a New Self-Signed Certificate]
button
[Delete] button
[Replace] button
*1 Only DER-format X.509 certificate files are supported.
Applying a newly generated server certificate requires stopping the OPC UA server function before the
operation.
For details, refer to the following:
Page 63 Online operations while an OPC UA server is running
7 PARAMETER SETTINGS
70
7.3 Setting Procedure
Description
The currently used server certificate is displayed if communication with an FX5-OPC is
successful after opening the [Server Certificate] tab or refreshing the display.
Buttons other than the [Refresh Display] button and the [Generate a New Self-Signed
Certificate] button are enabled after the server certificate is displayed.
Click this to reload the server certificate from an FX5-OPC.
This button is always enabled even when no server certificate is displayed.
Click this button to export the currently displayed server certificate as a DER X.509
certificate format file.
This button is enabled only when the server certificate is displayed in the certificate list.
Click this to export a new CSR (Certificate Signing Request) for the currently used
server certificate in the PEM encoded file format.
A CSR is generated by an FX5-OPC. Then, it can be signed by a certificate authority.
This button is enabled only when the server certificate is displayed in the certificate list.
Click this to open the "Generate a New Self-Signed Certificate" screen.
Set each item and generate a self-signed certificate in that screen.(Page 71
"Generate a New Self-Signed Certificate" screen)
This button is always enabled even when no server certificate is displayed.
Click this to delete the sever certificate stored in an FX5-OPC.
This button is enabled only when the server certificate is displayed in the certificate list.
Click this to replace the server certificate stored in an FX5-OPC with a new one.
A self-signed certificate generated by the module can be replaced with a CA-signed
certificate.
This button is enabled only when the server certificate is displayed in the certificate list.
*1