Ignition edge - Siemens S7-1500 certificates

Ignition
1

Got a Ignition Edge, communicating with a Siemens S7-1500 as a OPC client connection.

When I added the siemens client, I marked it as "Trust Certificate", and using the security mode/policys.
bilde
I saw the certificate getting added under "C:\Program Files\Inductive Automation\Ignition\data\opcua\client\security\pki\trusted\certs"

When all is configured, I'm getting the error :
Exception caught: UaException: status=Bad_SecurityChecksFailed, message=java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

This causes the connection to "Fault".
By unchecking the Certificate Validation Enabled, the communication starts working.

bilde
bilde1173×118 6.21 KB

I'm not all to well versed in certificate config, I can't see what to do next to get this working with the enable checked. What am I missing?

2

I would think it means the S7's OPC Server is using an unsigned certificate.

3

Can you share the certificate? It might mean the certificate is not a self-signed certificate, in which case the CA/root cert is needed as well.

4

The certificate is self-signed.
I'm not able to get the certificate at the moment

5

Ok, leave the validation option disabled for now, and when you're able to get the certificate to continue troubleshooting let us know.