Is it possible to install .crt file and .pem on OPC UA server because WebGUI do not allows to change SAN details like URL
While it's technically possible to update or replace the KeyStore file containing the server's certificate and private key, the web UI for regenerating certificates already allows you to make the supported modifications to the certificate:
If you're asking about changing the URI in the certificate; you cannot. The URI is used elsewhere in the server, that same URI must be present in the certificate.
Why do you think you need to change this?
Our customer that is connecting to our OPC Server is having OPC UA Client that seems to be requires to have SSL Cert under SAN details URL in format URL=URI:10.x.240.10 and not
It can't be changed, and the contents and format of this URI are not dictated by the OPC UA spec. If their client truly relies on this having a certain format or containing certain information then it is broken.
Thanks Kevin for prompt reply and answer. Then this is closed topic.