Search

Scope: Core (OPC-10000-*) All specs

20 result(s) for CertificateType

OPC-10000-9 – OPC Unified Architecture - Part 9: Alarms & Conditions

5.8.24.7 CertificateExpirationAlarmType

HasProperty Variable ExpirationDate DateTime PropertyType Mandatory HasProperty Variable ExpirationLimit Duration PropertyType Optional HasProperty Variable CertificateType NodeId PropertyType Mandatory HasProperty Variable Certificate ByteString PropertyType Mandatory ConformanceUnits A & C CertificateExpiration ExpirationDate ... property is not provided, a default of 2 weeks shall be used. CertificateType - See Part 12 for definition of CertificateType. Certificate is the certificate that is about to expire
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.6 Pull Management Workflow

requests that are waiting to be completed and their relationship with a CertificateGroup and CertificateType . SigningRequestPending If one or more signing requests are pending for a CertificateGroup , the FinishRequest Method ... CertificateGroupId to check if a certificate update is required. This is repeated for each CertificateType needed for the CertificateGroup . Update Required If GetCertificateStatus returns UpdateRequired set to True
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.7.2 Update Certificates Workflow

ManagedApplications Folder does not need to trust the CertificateManager Certificate Update Required? For each CertificateType in a CertificateGroup the CertificateManager must determine if an update is required. This is usually
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.7.4 Update Single Certificate Workflow

containing workflow. Certificate Exists? An existing Certificate may not be assigned to the CertificateType slot or it may not have field values that meet the requirements of the CertificateManager
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.7.5 Create Endpoint Workflow

instance. It is used to create the BrowseName for the new CertificateGroup Object . New CertificateType Required? Checks if a new CertificateType is required. Add CertificateType to CertificateGroup. A new CertificateType
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.8.3.1 CertificateGroupType

Purpose Property specifies the allowed CertificateTypes . It shall be a direct subtype of CertificateType . See 7.8.3.4 for more details. The CertificateExpired Alarm which is raised when a Certificate associated with
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.8.3.3 CertificateGroupFolderType

allowed for the NonUaApplications Certificates . They shall specify one or more subtypes of CertificateType (see 7.8.4.1 and Table 99 ). The DefaultHttpsGroup Object represents the default CertificateGroup for HTTPS communication
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.8.3.4 CertificateGroupDataType

already exists it is not changed, if an element does not exist a new CertificateType is added. If existing CertificateTypes are not in the list they are deleted ... assigned. The update is rejected if a Certificate is assigned to a deleted CertificateType . The DeleteCertificate Method is used to remove Certificates . The Purpose imposes restrictions on the allowed CertificateTypes
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.8.4.2 ApplicationCertificateType

ApplicationCertificateType IsAbstract True References NodeClass BrowseName DataType TypeDefinition Modelling Rule Subtype of the CertificateType defined in 7.8.4 . 0:HasSubtype ObjectType 0:RsaMinApplicationCertificateType Defined in 7.8.4.8 . 0:HasSubtype ObjectType 0:RsaSha256ApplicationCertificateType
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.8.4.3 HttpsCertificateType

HttpsCertificateType IsAbstract False References NodeClass BrowseName DataType TypeDefinition Modelling Rule Subtype of the 0: CertificateType defined in 7.8.4 . Conformance Units GDS Certificate Manager Pull Model Push Model for Global Certificate
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.8.4.4 UserCertificateType

UserCertificateType IsAbstract True References NodeClass BrowseName DataType TypeDefinition Modelling Rule Subtype of the 0: CertificateType defined in 7.8.4 . Conformance Units GDS Certificate Manager Pull Model Push Model for Global Certificate
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.8.4.5 TlsCertificateType

TlsCertificateType IsAbstract True References NodeClass BrowseName DataType TypeDefinition Modelling Rule Subtype of the 0: CertificateType defined in 7.8.4 . Conformance Units GDS Certificate Manager Pull Model Push Model for Global Certificate
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.9.3 StartSigningRequest

request. If null the CertificateManager shall choose the DefaultApplicationGroup . CertificateTypeId The NodeId of the CertificateType for the new Certificate . If null the CertificateManager shall generate a Certificate based ... public key length shall meet the length restrictions for the CertificateType. If the certificateType is a subtype of HttpsCertificateType the Certificate common name (CN=) shall be the same
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.9.4 StartNewKeyPairRequest

request. If null the CertificateManager shall choose the DefaultApplicationGroup . CertificateTypeId The NodeId of the CertificateType for the new Certificate . If null the CertificateManager shall generate a Certificate based ... public key length shall meet the length restrictions for the CertificateType. If the certificateType is a subtype of HttpsCertificateType the Certificate common name (CN=) shall be the same
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.9.10 GetCertificateStatus

context. If null the CertificateManager shall choose the DefaultApplicationGroup . CertificateTypeId The NodeId of the CertificateType for the Certificate . If null the CertificateManager shall select a Certificate based on the value
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.10.6 CreateSelfSignedCertificate

instance of the CertificateTypeId. If a Certificate is already assigned to the CertificateType slot then a Bad_InvalidState error is returned. If a transaction is in progress ... create a new PrivateKey . If a Server cannot generate PrivateKeys for the specified CertificateType then the Server shall return Bad_NotSupported . This Method shall be called from an authenticated SecureChannel
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.10.7 DeleteCertificate

Certificate that is associated with a CertificateGroup . If no Certificate is assigned to the CertificateType slot then a Bad_InvalidState error is returned. If a transaction is in progress ... CertificateGroupId [in] NodeId CertificateTypeId ); Argument Description CertificateGroupId The identifier for the CertificateGroup . CertificateTypeId The CertificateType for the Certificate to be deleted. Method Result Codes (defined in Call Service) Result Code
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.10.8 GetCertificates

have any CertificateTypes . Certificates A list of DER encoded Certificates assigned to CertificateGroup . The CertificateType for the Certificate is specified by the corresponding element in the CertificateTypeIds parameter. Method Result
OPC-10000-12 – OPC Unified Architecture - Part 12: Discovery and Global Services

7.10.19 ApplicationConfigurationDataType

Port. At least one CertificateGroup linked to a ServerEndpoint (see 7.10.23 ) shall have a CertificateType slot compatible with the Server Certificate used for the current Session . If no such slot
OPC-30300 – Using Generic Trust Anchor (GTA) API with OPC UA - Part 1: Generic Trust Anchor (GTA) API Profile for OPC UA

4.3.2.2 GTA API personalities

query string<InstanceUri>?cg=<CertificateGroup>[&ct=<CertificateType>&ix=<GenerationIndex>] where <InstanceUri > is either the ProductInstanceUri or the ApplicationUri ... BrowseName for the OPC UA CertificateGroup (e.g., "DefaultApplicationGroup"), and <CertificateType> is the Name portion of the BrowseName for the OPC UA CertificateType