Renew expired owned x509 certificate for OPCUA communication


What is the procedure to, at runtime, replace current certificate and private key used by OPCUA with new one.

I used ArCertImportOwn() function to get new fresh certificate, now I need to just replace that with new one.

Thanks, KG

Certificate in SSL configuration is identified using name. So just delete the old certificate and key and create new one with using same name for certificate and key. I’m not sure, but I think you have to restart PLC to load new SSL configuration with new certificate. Use ArCert library for that. B&R Online Help


You do need to restart for OPC UA communications. See TLS/SSL at B&R

1 Like

Yeah, thanks for help here.

1 Like