Skip to main content
MT_143896973-Newcomer
3-Newcomer
October 14, 2026
Question

KEPServerEX OPC UA Configuration Manager: Is Reinitialize required after trusting a Client Certificate?


Hello.

We are planning to trust an updated Ignition OPC-UA client certificate using the OPC UA Configuration Manager in KEPServerEX.

We have put together the following procedure based on the official manual (OPC UA Configuration Manager Help v1.044), but have two questions we would like to confirm.

Planned Procedure:

  1. Open the “Trusted Clients” tab and confirm that the new Ignition client certificate (Ignition OPC-UA Client) is listed.
  2. Verify that the SHA-1 Fingerprint of the listed certificate matches the updated value recorded on the Ignition side.
  3. Select the new client certificate, click “Trust”, then click “Close”.
  4. Right-click the KEPServerEX icon and select “Reinitialize”.
  5. Do not delete the old client certificate until the entire work is complete.

Questions:

① After clicking “Trust” on the updated certificate, is it necessary to perform a Reinitialize?
The official manual shows a note at the bottom of the Trusted Clients screen stating “Server Runtime reinitialization is required to utilize changes.” However, we could not find any description that explicitly states Reinitialize is required specifically for the Trust operation.

② If Reinitialize is executed, will connections from clients other than Ignition also be temporarily disconnected?

Thank you in advance for your help.

1 reply

MKhatriCommunity Manager
Support
October 14, 2026

Greeting!!
 

① Is Reinitialize required after clicking "Trust" on the updated client certificate?

Yes, we recommend performing a Server Runtime Reinitialize after trusting the updated client certificate. The OPC UA Configuration Manager documentation notes that"Server Runtime reinitialization is required to utilize changes," which applies to modifications made within the Trusted Clients store, including trust status changes. Reinitialization ensures that the OPC UA server reloads the updated certificate configuration and begins accepting the newly trusted certificate.

② Will Reinitialize temporarily disconnect other clients as well?

Yes. During the reinitialization process, the KEPServerEX runtime is restarted and all active client connections may be temporarily disconnected, not only the Ignition OPC UA client. Most clients should automatically reconnect once the server runtime has completed reinitialization, but we recommend performing the change during a maintenance window if other critical clients are connected.

Your planned procedure looks appropriate, and keeping the old client certificate in place until the validation is complete is a good precaution.

Regards,
Mohit

Translate
Terms & ConditionsAccessibility statement