Create a certificate

To communicate securely, OPC UA applications must have appropriate public certificates and corresponding private keys.
Certificates created in
FactoryTalk Optix Studio
 are self-signed. To use such certificates, you need to set OPC UA clients to trust these certificates.
IMPORTANT: Do
not
 use self-signed certificates in production environments.
Alternatively, generate self-signed certificates and certificates trusted by Certificate Authorities (CA) in third party tools.
IMPORTANT:
Rockwell Automation
 is not responsible for any third-party software, including but not limited to its performance, security, updates, or compatibility with our products. Any use of third-party software is at your own risk, and we do not provide support, warranties, or guarantees for such software. Users should refer to the respective third-party providers for assistance and licensing terms.
  1. In the title bar, select the drop-down arrow after
    FactoryTalk Optix Studio Options
     and select
    Create certificate
    .
  2. Under
    Subject
    , complete:
    • Common name
      . Name of the OPC UA application.
    • Organization
      . Registration name of the company responsible for the certificate. Do not use non-alphanumerical characters or abbreviations.
    • Organization unit
      . Division in your organization responsible for the certificate.
    • Locality
      . City where your organization or organization unit is located. Use proper location names, as specified in the postal address. Do not use abbreviations.
    • State
      . Geographical area where your organization or organization unit is located. Geographical areas include states and provinces.
    • Country
      . Two-letter ISO-3166 country code where your organization or organization unit is located. For example,
      IT
      .
  3. Under
    OPC UA information
    , complete:
    • Application URI
      . Unique identifier for the project on a specific machine. Must be the same as the
      Product URI
       in the server configuration. See Add an OPC UA server.
    • Domain names
      . Local and remote domain names that you can use to access the machine.
      IMPORTANT: DNS names are only recognized if they are lower case.
    • IP addresses
      . (optional) IP addresses that you can use to access the machine.
  4. Under
    Certificate settings
    , complete:
    • RSA key strength
      . The size, in bits, of the RSA key.
      IMPORTANT:
      The
      RSA key strength
       and
      Signature algorithm
       values are compatible with the OPC UA security policies that you set in the OPC UA server and OPC UA client objects.
      The higher the
      RSA key strength
       and
      Signature algorithm
       values, the greater the use of resources for the encryption and decryption of messages between the server and client.
    • Signature algorithm
      . Algorithm used by devices to sign data with the certificate.
    • Expiration date
      . Determines for how long the certificate will be valid.
  5. In
    Name
    , enter a file name for the certificate.
  6. In
    Location
    , enter or browse to the location to store the certificate.
  7. Select
    Create
    .
Rockwell Automation
 recommends backing up the certificate to a personal folder outside of the project.
Provide Feedback
Have questions or feedback about this documentation? Please submit your feedback here.
Normal