Hello,
can you please post your modified .config file as well? The problem is that I do not see the entries I expected in the trace file. So, I want to check if the .config file is OK.

Thank you

Thank you.

The certificate is probably being rejected for some reason, but the normal log entry do not contain enough information.
We need to go deeper. Can you please enable the extended tracing (kb.opclabs.com/QuickOPC:_How_to_enable_extended_tracing ) and provide us with the collected data.

Kind regards

Hello.

Let me repeat my question: Do you also put your certificate (as .DER, without private key) to the Trusted peers certificate store?

Regards

That is a complicated process, but in general, an existing certificate for the specified subject name should be kept (and not replaced) and used, as long as it itself validates (I think that it thus should also be in the Trusted store!) and fulfills additional conditions such as that the key size is not too low.

For initial diagnostics , please hook a handler to the (static) EasyUAClient.LogEntry event, and send us the events generated when QuickOPC replaces the certificate when it "should not. If there is a confidential information in it, email it to support09 (at) opclabs.com instead of posting here.

Best regards

No, you cannot. QuickOPC relies on the behavior of UA Certificate generator (OPC Foundation) with most default settings.

QuickOPC will automatically create *some* certificate for you, without you having to specify anything, or allowing you to specify just the very basics (application name). This is an intentional design decision: There are so many ways and options the certificate can be generated, that even if we provided more option, there will always be somebody saying that they want their certificate be different.

If the certificate you get by the "automatic" process is not what you want, you need to generate one yourself by whatever means you choose, and then point QuickOPC to that certificate. This gives you total control of the certificate used, if you need it.

I understand from your other post that you have a problem with that approach as well, and I will reply to that post separately. But it is the right way to do it.

Best regards