Administration - Certificate tab

On the CERTIFICATE tab you make all settings around the certificates.

CA certificate

If you use the internal GDS, the CA certificate is already pre-entered. 

The CA certificate is the root certificate from which the Device and Update Management derives further certificates. If you regenerate the root certificate, the Device and Update Management practically has a new identity. Therefor, you should only enter it once or regenerate it after a security incident. 

If you don't have a PKI and don't want to use the certificate management from the Device and Update Management, you can upload your own certificates. 

For the certificate you have to enter a validity duration. 

The GDS server is also the OPC UA® server used by the Device and Update Management client. The server needs an own certificate. Based on the above CA, a certificate is generated for the GDS server. 

When all certificates are set, they are visible in the OPC UA® applications area in the certificate details. 

Certificate management

In this area you see all applications which have received a certificate from the DaUM GDS.

With the Revoke button you can revoke the respective certificate of the device.