Need help with certificates and connecting to ACI

[azure-samples]

Need help with certificates and connecting to ACI

[luiscantero]

What client are you using to connect to the opcplc? (pls try UaExpert, for example)

You don't need to get the server certificate or upload the one from the client. The client usually shows a warning and you can accept the risk of connecting to a self-signed certificate and connect to it.

You can get the URI to your server from the Azure Portal, this is where you need to connect to:

[ondrelogin]

I was using a custom client, but I downloaded UaExpert and tried and I still get an error and can't connect.
I get the option to

Please try another configuration or press 'Ignore' to force trying to connect.

Ideally I would like to have a better solution where I can actually use security and connect to an OPC UA server, hosted in a container in more realistic production scenario. Event I can get around these various prompts of getting it to work, I suspect that if I restart the container, then all the connections would fail, because a new Container would start up and a brand new set of certificates would be created and I'd have to go through this headache again.

Is there not a way to run this project, as an ACI, with some level of certificate security?
If so, can I have some help on how to do that?

[luiscantero]

In the readme we mention the following, have you tried it like this?

Note: Make sure that your OPC UA client uses security policy Basic256Sha256 and message security mode Sign & Encrypt to connect.

Restarting the container will indeed reset the certificates. You will have to mount a share to be able to persist the certificates. You will then need to modify the deployment template to pass the options related to the certificate storage, just search for "appcert" and "trustedstore" in the readme file.

[SatishBoddu-MSFT]

Hello @ondrelogin Just checking back, could you please let us know if you need further help in this matter. Please refer to the above response and do let us know.

[luiscantero]

Closing due to no response. Feel free to reopen if we can help.