Have You Seen Workflow Lately? Click here to check out all the new features in the latest version.

Supercharge your GE solution! Download a free trial of Proficy Operations Hub, CSense analytics, and more. Learn more about the Proficy 2024 releases, by signing up for one of our upcoming events.

Home
Configure Your Environment
Certificate Handling
OPC UA Certificate Handling
An initial attempt to connect securely to an OPC UA server from the Workflow server will fail due to a missing certificate with the error: The OPC UA server does not have any secure endpoints or the Workflow certificate is not trusted.
Generate OPC UA Self-Signed Certificates Manually
You can use the OPC UA Configuration tool to manually generate a self-signed Workflow security certificate.

Workflow Products Documentation

Configure Your Environment
- User Password Configuration
- Computer Management
- User Interface Controls in the Task List
- Custom Solutions and Displays
- SSL Encryption for SQL Server
- Certificate Handling
  - OPC UA Certificate Handling
    An initial attempt to connect securely to an OPC UA server from the Workflow server will fail due to a missing certificate with the error: The OPC UA server does not have any secure endpoints or the Workflow certificate is not trusted.
    - Generate OPC UA Self-Signed Certificates Manually
      You can use the OPC UA Configuration tool to manually generate a self-signed Workflow security certificate.
    - Move Untrusted Workflow Certificates on the OPC UA Server
      You can manually move certificates from the OPC UA server’s untrusted or rejected certificates folder to its trusted certificate folder.
    - Register Workflow Certificates with Global Discovery Server (GDS)
      You can use the OPC UA Configuration tool to connect to the Global Discover Service (GDS) server, sign a self-signed Workflow security certificate, and automatically register the application with GDS.
  - Generate Certificates for Workflow 2.6
    Workflow 2.5 and earlier does not support the creation of self-signed certificates with the Subject Alternative Name (SAN) property.
  - Modify Server Certificate Folder Location
    You can modify the location of the Workflow server certificates folder.
  - Resolve Port conflicts between prior Proficy Workflow installations and Web HMI
    For existing Workflow installations prior to 2.6, Workflow and Web HMI ports are both set to 8444, making applications installed on the same machine incompatible.

Generate OPC UA Self-Signed Certificates Manually

You can use the OPC UA Configuration tool to manually generate a self-signed Workflow security certificate.

About this task

Once generated, a self-signed Workflow security certificate is untrusted and must be moved to the trusted store on the OPC UA server. See Move Untrusted Workflow Certificates on the OPC UA Server for more information. The Workflow security certificate is stored in the C:\ProgramData\Proficy\OpcUaCertificate\own\certs folder.

Procedure

From the OPC UA server, click Start > All Programs > General Electric > Workflow > Configuration > Configure OPC UA.
The Configure OPC UA tool appears.
Click Generate Self-Signed.
The following actions occur:
- Configuration saved.
- Created <Workflow certificate name>.
- Skipping: Certs do not register with LDS.