Creating a Certificate for the Geo SCADA OPC UA Client

[sbeadle]

📖 Home  

An optional security feature of the OPC UA Client Driver in Geo SCADA is to add a Client Certificate. This certificate can be used by OPC Servers to validate their connections to Geo SCADA.

Here are brief instructions explaining how to create that certificate. Once created, add it to your Geo SCADA configuration.

You will need to create and edit a configuration file used in the first command. A sample for this file is attached to this article.

At present the Common Name property for Geo SCADA is set to 'ACME'. In a future release of Geo SCADA you will be able to use your own identification and configure this property on the Geo SCADA UA Driver objects.

Create Certificate:
openssl req -x509 -newkey rsa:4096 -days 730 -keyout key.pem -out cert.pem -sha256 -config opensslACME.cnf

Convert public Cert to DER:
openssl x509 -inform pem -in cert.pem -outform der -out cert_ot4w10527_Schneider.der

Convert Private Key to DER - with NO PASSPHRASE! :
openssl rsa -inform pem -in key.pem -outform der -out prnoen_ot4w10527_Schneider.der

This article is provided for outline guidance only. Please consult security professionals with knowledge of your application and environment for your setup.

opensslACME.zip