Thanks. I talked to PI and then IA tech support. The only thing that made it all work was to allow anonymous access in OPC UA server settings. This is ok since it is a test system but it seems like a certificate/authentication issue. Any ideas?
I have seen posts about modifying the certificate:
http://forum.inductiveautomation.com/t/uri-specified-in-the-applicationdescription-does-not-match-the-uri-in-the-certificate/37283/12