GetCertificates returns the Certificates assigned to Application and associated with the CertificateGroup.

This Method shall be called from an authenticated SecureChannel and from a Client that has access to the CertificateAuthorityAdmin Role, the ApplicationAdmin Privilege, or the ApplicationSelfAdmin Privilege (see 7.2).

Signature

GetCertificates(

[in] NodeId applicationId

[in] NodeId certificateGroupId

[out] NodeId[] certificateTypeIds

[out] ByteString[] certificates

);

Argument

Description

applicationId

The identifier assigned to the Application by the GDS.

certificateGroupId

An identifier for the CertificateGroup that the Certificates belong to.

If null, the CertificateManager shall return the Certificates for all CertificateGroups assigned to the Application.

certificateTypeIds

The CertificateTypes that currently have a Certificate assigned.

The length of this list is the same as the length as certificates list.

certificates

A list of DER encoded Certificates assigned to Application.

This list only includes Certificates that are currently valid.

Method Result Codes (defined in Call Service)

Result Code

Description

Bad_NotFound

The applicationId does not refer to a registered Application.

Bad_InvalidArgument

The certificateGroupId is not recognized or not valid for the Application.

Bad_UserAccessDenied

The current user does not have the rights required.

Table 57 specifies the AddressSpace representation for the GetCertificates Method.

Table 57 – GetCertificates Method AddressSpace Definition

Attribute

Value

BrowseName

2:GetCertificates

References

NodeClass

BrowseName

DataType

TypeDefinition

ModellingRule

0:HasProperty

Variable

0:InputArguments

0:Argument[]

0:PropertyType

Mandatory

0:HasProperty

Variable

0:OutputArguments

0:Argument[]

0:PropertyType

Mandatory