KEPServerEX CA certificates
Hello,
We are using KEPServerEX 6.17.269.0 and are evaluating CA-based trust for OPC UA client application certificates.
We successfully tested importing a CA certificate into Trusted Clients and connecting an OPC UA client whose certificate was signed by that CA, without individually approving the client certificate.
We also found a similar discussion describing the same behavior:
However, we could not find any official documentation confirming this functionality.
Could someone from PTC confirm:
-
Is CA-based trust for OPC UA client application certificates officially supported in KEPServerEX 6.17.269.0?
-
Does trusting a CA certificate automatically establish trust for all valid client certificates issued by that CA?
-
Is this behavior officially supported and expected to remain available in future versions?
-
Are there any specific requirements or limitations regarding certificate chains, intermediate CAs, or CRL validation?
We would appreciate a reference to the official documentation, if available.
Best regards