Please consider registering

sp_LogInOut Log In sp_Registration Register

Register | Lost password?
Advanced Search

— Forum Scope —

— Match —

— Forum Options —

Minimum search word length is 3 characters - maximum search word length is 84 characters

sp_Feed Topic RSS sp_TopicIcon
Cerfificate handling with multiple ua clients
October 21, 2019
13:12, EET
New Member
Forum Posts: 2
Member Since:
October 21, 2019
sp_UserOfflineSmall Offline

i have a question regarding certificate handling with multiple ua clients.
We are migrating our application to run the ua client in a microservice architecture where the uaclient service runs in docker, is scaled to multiple instances and uses a pki infrastructure with Basic256Sha256SignEncrypt security mode and self signed certificates to connect to the opc servers.
My question is: should the uaclient service instances share one central certificate store and use the same public/private key pair and ApplicationDescription since it is essentially one application that connects to the servers (the instances have different internal ips in the docker network but i think are visible with the same external ip to the opc servers when connecting)?
Or should each service instance use its own key store, AppDescription and key pair? Each opc server is connected to one client instance at a time.
Are there any best practices or guidelines regarding security for running the uaclient in a scalable microservice architecture?
I hope my questions are not to confusing and am thankful for any information/experiences regarding this topic .

October 21, 2019
14:57, EET
Jouni Aro
Forum Posts: 833
Member Since:
December 21, 2011
sp_UserOfflineSmall Offline

I would say that in this case it is reasonable to let the clients share their identity (ApplicationDescription, Certificate & Certificate Store), since they are supposed to look the same towards the servers anyway.

October 22, 2019
17:46, EET
New Member
Forum Posts: 2
Member Since:
October 21, 2019
sp_UserOfflineSmall Offline

Thank you for the fast answer

Forum Timezone: Europe/Helsinki

Most Users Ever Online: 119

Currently Online:
18 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Top Posters:

hbrackel: 91

pramanj: 86

ibrahim: 68

kapsl: 57

gjevremovic: 49

TimK: 41

Fransua33: 39

fred: 36

Rainer Versteeg: 32

peterrob45: 25

Member Stats:

Guest Posters: 0

Members: 897

Moderators: 12

Admins: 1

Forum Stats:

Groups: 3

Forums: 14

Topics: 898

Posts: 3787

Newest Members:

thojermaine, Lukas, lbtsheldon, dpto.informatica, nolazky8119, peter.jakubik, amaralesbeltateresa@yahoo.com, amaralesbeltateresa@gmail.com, esbeltateresaamaral@yahoo.com.br, doanphan111

Moderators: Jouni Aro: 833, Otso Palonen: 32, Tuomas Hiltunen: 5, janimakela: 0, Pyry: 1, Terho: 0, Petri: 0, Bjarne Boström: 422, Heikki Tahvanainen: 402, Jukka Asikainen: 1, Teppo Uimonen: 16, Markus Johansson: 1

Administrators: admin: 0