Article - CS355587

Using an external CA provided certificate for OPC UA communication with PTC Kepware products

Modified: 25-Mar-2026   


Applies To

  • Kepware Server (formerly KEPServerEX) 6.9.572.0 to 7.0
  • ThingWorx Kepware Server (legacy) 6.9.572.0 to 6.18

Description

  • Using an external CA provided certificate for OPC UA client to communicate with PTC Kepware products 
  • How to configure external certificate instead of the self-signed certificate for OPC UA communication?
  • How to configure 2 Kepware instances(one as client and another as server) to communicate using OPC UA , with external CA provided certificates?
  • Requirements to use an external certificate as the Server Instance Certificate to secure OPC UA communication
  • What is the certificate key usage required?
  • What is the certificate advanced key usage required?
  • What are the Alternative Names required?
This is a printer-friendly version of Article 355587 and may be out of date. For the latest version click CS355587