Hi,
i have a question regarding certificate handling with multiple ua clients.
We are migrating our application to run the ua client in a microservice architecture where the uaclient service runs in docker, is scaled to multiple instances and uses a pki infrastructure with Basic256Sha256SignEncrypt security mode and self signed certificates to connect to the opc servers.
My question is: should the uaclient service instances share one central certificate store and use the same public/private key pair and ApplicationDescription since it is essentially one application that connects to the servers (the instances have different internal ips in the docker network but i think are visible with the same external ip to the opc servers when connecting)?
Or should each service instance use its own key store, AppDescription and key pair? Each opc server is connected to one client instance at a time.
Are there any best practices or guidelines regarding security for running the uaclient in a scalable microservice architecture?
I hope my questions are not to confusing and am thankful for any information/experiences regarding this topic .
Thanks,
ivfa