Please consider registering

sp_LogInOut Log In sp_Registration Register

Register | Lost password?
Advanced Search

— Forum Scope —

— Match —

— Forum Options —

Minimum search word length is 3 characters - maximum search word length is 84 characters

sp_Feed Topic RSS sp_TopicIcon
Cerfificate handling with multiple ua clients
October 21, 2019
13:12, EEST
New Member
Forum Posts: 2
Member Since:
October 21, 2019
sp_UserOfflineSmall Offline

i have a question regarding certificate handling with multiple ua clients.
We are migrating our application to run the ua client in a microservice architecture where the uaclient service runs in docker, is scaled to multiple instances and uses a pki infrastructure with Basic256Sha256SignEncrypt security mode and self signed certificates to connect to the opc servers.
My question is: should the uaclient service instances share one central certificate store and use the same public/private key pair and ApplicationDescription since it is essentially one application that connects to the servers (the instances have different internal ips in the docker network but i think are visible with the same external ip to the opc servers when connecting)?
Or should each service instance use its own key store, AppDescription and key pair? Each opc server is connected to one client instance at a time.
Are there any best practices or guidelines regarding security for running the uaclient in a scalable microservice architecture?
I hope my questions are not to confusing and am thankful for any information/experiences regarding this topic .

October 21, 2019
14:57, EEST
Jouni Aro
Forum Posts: 851
Member Since:
December 21, 2011
sp_UserOfflineSmall Offline

I would say that in this case it is reasonable to let the clients share their identity (ApplicationDescription, Certificate & Certificate Store), since they are supposed to look the same towards the servers anyway.

October 22, 2019
17:46, EEST
New Member
Forum Posts: 2
Member Since:
October 21, 2019
sp_UserOfflineSmall Offline

Thank you for the fast answer

Forum Timezone: Europe/Helsinki

Most Users Ever Online: 267

Currently Online:
4 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Top Posters:

hbrackel: 103

pramanj: 86

ibrahim: 70

kapsl: 57

gjevremovic: 49

TimK: 41

Fransua33: 39

fred: 38

Rainer Versteeg: 32

Thomas Reuther: 31

Member Stats:

Guest Posters: 0

Members: 1102

Moderators: 14

Admins: 1

Forum Stats:

Groups: 3

Forums: 15

Topics: 1008

Posts: 4266

Newest Members:

normagalindo47, aurelia27u, isobel41d356980, michaeldegli, gqbdolores, kez1399, jaclynmcvay358, testuser20, edox, danilolapine

Moderators: Jouni Aro: 851, Otso Palonen: 32, Tuomas Hiltunen: 5, janimakela: 0, Pyry: 1, Terho: 0, Petri: 0, Bjarne Boström: 544, Heikki Tahvanainen: 402, Jukka Asikainen: 1, Teppo Uimonen: 20, Markus Johansson: 19, Matti Siponen: 53, Lusetti: 0

Administrators: admin: 0