Expired Default OPC UA certificate

[Sectoid]

Hello! 

Five years ago I created LabVIEW program that operates as OPC UA client. Few days ago this program stops working because default OPC UA certificate become expired. How to reissue or extend this certificate, or create new one from expired?

[pallen]

Your OPC Server should be able to issue a new certificate file.  Or perhaps you can extend the length of time the old certs will be accepted.  Either way, you likely need to check your OPC Server settings. 

[Sectoid]

My OPC server is not related to this certificate, this default OPC UA certificate is issued by NI OPC UA App (CN = NI OPC UA App, DC = my PC name), and located in "C:\ProgramData\National Instruments\certstore\opcua\Default OPC UA.der". I suspect it was created by LabVIEW. And I think should be some tool to manage certificates created by labVIEW.

[Jacobson-ni]

Both OPC UA clients and servers will have their own certificates so the server will have to trust the client's certificate and the client will have to trust the server's certificate (either side can usually trust all clients/server but I'm not sure if you would still need a certificate).

The LabVIEW OPC UA API has a function to create a certificate so you can use that to generate a new "Default OPC UA" certificate and then transfer that to your server so you can add it to the list of trusted clients.

[pallen]

There's some documentation for the LabVIEW tools here: 

http://zone.ni.com/reference/en-XX/help/376230B-01/opcuatool/creating_opcua_svr_opcua_clnt/

Setting up connections is here:  ( Info on secure connections at bottom )

http://zone.ni.com/reference/en-XX/help/376230B-01/opcuatool/establishing_connection_btwn_opcua_svr_...

[Sectoid · Accepted solution]

Solved.

I used non-secure opc ua connection cause client and server operates on same PC. Therefore I not cared about certificates. But surprisely certificates used even connection is non-secure.
I just deleted expired certificates and them was created with new creation date at the next application start.

[pallen]

Thanks for following up with what worked for you. 

Future visitors to this thread will thank you!  

[MikaG]

just keeping this thread alive, as it solved my problem aswell. My certificates were 4 years and a week old. Here's the NI support site:

https://knowledge.ni.com/KnowledgeArticleDetails?id=kA00Z0000019US7SAM