Go to the configuration view and navigate to “Access and Security"→"Certificate Store"→"Own certificates”. Double click “New OPC UA certificate”
In the new window enter your information. Make sure that you set the expiring date far enough into the future so that you don’t have to renew the certificate within the machine lifespan. It is important to add the IP address of the PLC. Certificates without a specific domain name or IP address can be imported but will create the error message ERR_CERT_COMMON_NAME_INVALID.
2. certificate import on local PC
To avoid warning that connection is not private, you have to install your certificate on local PC
To add certificates to the Trusted Root Certification Authorities store for a local computer. Just go to folder with certificate, double click on it for installation.
Is it possible to configure the mappView server to validate the communication partner (mappView client) using a client certificate?
Answer:
• “Trusted certificates” is not evaluated by the mapp View server … so in general this is currently not possible at all!
Please notice here:
The mapp View server has usually a certificate – and the client has (hopefully) the possibility to validate the certificate … if the client does not have this possibility, the client (=browser) will usually ask the user, if he wants to trust this certificate.
In the scenario the customer wants to have, this “validation” would need to work in both direction, meaning also the client would need to have a certificate and the server would need to check it. Technically this is possible, but rather uncommon.
As this is rather uncommon, this was never implemented on the mapp View server side.
Hello,
I might have a note regarding SSL communication between the mappView server and the PLC web server. If you want to connect SDM or mappCockpit to the HMI through the WebViewer widget, you need to set the parameter “Validate SSL communication partner” to off in the SSL configuration for the web server.
Question:
Answer:
