Trusted Clients

If anonymous authentication is not enabled, the InTouch OPC UA server must be configured to trust the client certificate submitted in order to establish a connection.

To do so, using Windows File Explorer, navigate to C:\ProgramData\AVEVA\PCS\OPC UA Rejected Client Certificates\certs.

Select the .der file that starts with XLR-UAClient, right-click and select Install Certificate.

For Store Location, select Local Machine (note, you will need Windows administrator access). Click Next.

For Certificate Store, select Place all certificates in the following store. Click Browse and select Trusted People. Click Next. Click Finish to set trust.