Connecting to ibaPDA OPC UA server, Bad_CertificateUriInvalid

Ok, that one's Ignition, but now you have different 2 clients seeing the exact same a similar issue... maybe it's time to get the Server vendor involved.

Ignition gets BadIdentityTokenRejected, not BadIdentityTokenInvalid, though... which might again suggest you just have the wrong username/password.

where can i find the certificates used by the ignition OPC UA client?

You can download it from the Ignition Gateway under something like Config > OPC UA > Security, on the Certificates tab.

Is there a way to also get the .pfx file?

It's on disk at $IGNITION/data/opcua/client/security/certificates.pfx. Not accessible via web UI.

The passwords are all "password".


is there a way to change the URL here?

Technically yes, but it will look exactly like that except with another UUID in place of the one at the end. It's not otherwise customizable.

That also appears to be the Ignition server certificate rather than the client.

What are you up to here?

@Felix_Cheah, I have suffered this before. I recommend you to go for a traditional user/pass authentication in ibaPDA.