setting up a Custom Certificate

By default, the @opcua/for-node-red package generates a self-signed certificate for each OPC UA Client connection. However, in some scenarios, you may want to use a custom certificate and private key for enhanced security or compliance with organizational policies.

We provide a single PKI location shared with all Client connections.

The PKI is located in the following folder:

• Linux: ~/.config/opcua-for-node-red/PKI folder
• macOS: ~/Library/Preferences/opcua-for-node-red-nodejs/PKI
• Windows: %APPDATA%\opcua-for-node-red-nodejs\PKI (for example, C:\Users\USERNAME\AppData\Roaming\opcua-for-node-red-nodejs\PKI)

for X509 user certificates

The PKI is located in the following folder:

• Linux: ~/.config/opcua-for-node-red/PKI folder
• macOS: ~/Library/Preferences/opcua-for-node-red-nodejs/PKI
• Windows: %APPDATA%\opcua-for-node-red-nodejs\PKI (for example, C:\Users\USERNAME\AppData\Roaming\opcua-for-node-red-nodejs\PKI)