A self-signed certificate is required to secure the flow of data between the station and the native process that serves as
a bridge to the management server. You will bind this certificate to the management server running on a Windows computer.
Prerequisites: You are working in
Workbench on a PC. You are connected to the Supervisor station.
This procedure uses the
Workbench certificate management tool to create and export a certificate, a third-party utility to convert the certificate’s exported
.pem file to a .pfx file for importing into the Windows certificate store and to binding to the native process port (9117).
Perform the following steps:
- Click .
The Certificate Management for Niagara Workbench view opens.
- To create the new server certificate, click New.
The
Generate Self Signed Certificate window opens.
This window defaults to create a Server certificate. The name of the certificate in this example is certxprotect.
- Give the certificate an
Alias (a name), fill in at least the required properties including the Country Code, Certificate Usage (Server) and click OK.The system generates the certificate and adds it to the other certificates in the User Key Store.
- To export the certificate with its private key, click Export, enable
Export the private key, create a strong Password to protect the private key and click OK.The
Certificate Export window opens.
The screen capture shows the certificate in the
Niagara user home and the key just before saving it to the same home location.
- Enter a name for just the key, click Save and confirm that the export was successful by clicking OK.
In this example, the name of the certificate is: certxprotect.
- As a best practice make a note of the private key password and store it in a safe location.
This creates the .pem file in your C:\Users\[username]\[frameworkx.x]\tridium\certManagement folder, where [username] is unique for your computer and frameworkx.x is the version of the
Niagara framework.