SMC Networks EXA1 EN Series User manual

No.DOC1056928
PRODUCT NAME
SMC Certificate Generator
Model / Series / Part No.
EXA1-※※-EN
EXA1-※※-PN
2023-10-18 12:48
DL400113

-2-
No.DOC1056928
Table of Contents
About this software ··························································3
Overview······························································································3
System configuration ···················································································3
How to use this software ······················································4
Installation ···························································································4
Creation of CA certificate ··············································································7
Creation and installation of device certificate ·······························································9
How to check the device certificate·······································································12
Other ································································································13
2023-10-18 12:48
DL400113

-3-
No.DOC1056928
About this software
Overview
This software tool is intended to generate the device certificate for an OPC UA™-supported product. A
device certificate may be required when an OPC UA™-supported device is connected to an OPC UA™ client
tool. This software is used to generate and install the device certificate.
This is application software that runs on a PC. The following operating systems are supported:
Windows® 11 (64 bit)
Windows® 10 (32 bit/64 bit)
This software is applicable to the following OPC UA™-supported products:
EXA1-**-PN-**
EXA1-**-EN-**
System configuration
This software is used by connecting the PC on which this software is installed and the OPC UA™-supported
product with a LAN cable. It is advised to use a LAN cable that is suitable for the OPC UA™-supported
product you are using. For details about the LAN cables which can be used, refer to the operation manual for
the OPC UA™-supported product being used.
PC
OPC UA™-supported products
EXA1 series
LAN cable
2023-10-18 12:48
DL400113

-4-
No.DOC1056928
How to use this software
Installation
To use this software, it must be installed on a PC. Download the file below from the SMC website.
SMC Certificate Generator Setup 2.1.0.0.exe
Once downloaded, click the file to start the installation, and the window below will appear. Then, click “Next”
to move to the next step.
The following window will appear. Read the License Agreement and if you agree to the terms of the
agreement, select “I accept the agreement” and click the “Next” button.
2023-10-18 12:48
DL400113

-5-
No.DOC1056928
When the following window appears, select the folder in which this software is to be installed and click the
“Next” button.
You will then be given the option to create a desktop icon. Tick the box to create the icon and click the “Next”
button.
2023-10-18 12:48
DL400113

-6-
No.DOC1056928
The software is now ready for installation. Click the “Install” button to begin the installation.
When the following window appears, click “Finish” to complete the installation.
2023-10-18 12:48
DL400113

-7-
No.DOC1056928
Creation of CA certificate
Once the software is installed on the PC, the SMC Certificate Generator is added to the Windows Start menu
and is ready to create a CA and device certificates.
The following screen will appear when the SMC Certificate Generator is opened.
To create a CA certificate, click “Manage” at the bottom of the window.
When the following screen appears, click the “New” button.
2023-10-18 12:48
DL400113

-8-
No.DOC1056928
To create a CA certificate, enter Valid Days, CRL Valid Days, and Common Name (CN). The Common Name
can be any value. Fill in the other field as required.
After filling in all required fields, click the “Generate CA Certificate” button.
When the following window appears, the creation of the CA certificate is complete.
To view the CA certificate files, click the “Show in folder” button in the lower half of the window to open the
folder where the CA certificates are saved.
2023-10-18 12:48
DL400113

-9-
No.DOC1056928
Creation and installation of device certificate
In order to create and install a device certificate, first connect your PC to the OPC UA™-supported product
you are using with a LAN cable. Then, power on and start up the OPC UA™-supported product.
Once the connection between the PC and the OPC UA™-supported product is established, the SMC
Certificate Generator will appear on the PC as shown below.
Click the Settings button at the top of the screen, and the following Settings window will appear. Click the
“Edit certificate default” button under “Certificate Settings”.
Settings button
2023-10-18 12:48
DL400113

-10-
No.DOC1056928
Check that the correct Valid Days have been entered, or edit or re-enter them if necessary. After filling in the
required fields, click the “OK” button to return to the original screen.
If multiple CA certificates are available, select the required certificate from the dropdown. Select the EXA1
from the list of devices and click the “Assign Certificate” button, and the window shown on the next page will
appear.
①Select the required CA certificate.
②Generate and assign the device certificate.
2023-10-18 12:48
DL400113

-11-
No.DOC1056928
On this screen, enter the information required to create the device certificate.
•Tick “OPC UA” under “Protocols to Assign”.
•For Common Name under Identity, the values to be entered are different depending on the
OPC UATM -supported product. See Table 1 below for the values to enter.
Table. 1 Relationship between OPC UATM supported products and corresponding Common Names
OPC UA™ -supported products
Common Name
EXA1-**-PN-**
EXA1
EXA1-**-EN-**
EXA1-**-EN-**
•For Alternative Names, select the item to add (IP, URI, etc.) from the pull-down menu. After entering
a value, click the “Add” button.
URI: Enter the following values:
urn: [PID]:www.smcworld.com
[PID]: Enter the PID (8 characters) of the OPC UA™-supported product being used
The PID can be found on the label affixed to the enclosure of the OPC UA™-supported product.
(Scan the Data Matrix code on the label to see the PID and other information).
■ Example
The value for [URI] when PID is 17E340EF
urn:17E340EF:www.smcworld.com
When all of the fields have been filled in, click the “Continue” button.
You will then be asked to enter your Username and Password as shown below.
Make sure that you use the Username and Password set for your OPC UA account. The default username
and password are both “admin”. After entering the username and password, click the “Continue” button.
2023-10-18 12:48
DL400113

-12-
No.DOC1056928
When the following window appears, the creation and installation of the device certificate is complete.
How to check the device certificate
The web server of the OPC UA™-supported products allows the device certificate to be viewed or deleted.
After starting the web browser software on your PC, enter the IP address of your OPC UA™-supported
product in the URL of the web browser to access the web server, and select “Certificate”. For details of the
web server, refer to the operation manual of the OPC UA™-supported product being used.
Below is an example of accessing the EXA1-**-PN-** web server. Select “Certificate”, and the device
certificate will be listed under the “Device Certificate” section.
In this window, the device certificate can also be deleted by clicking the “Delete” button.
2023-10-18 12:48
DL400113

-13-
No.DOC1056928
Other
Creation of the device certificate file
The SMC Certificate Generator allows the device certificate file to be created (i.e., a security certificate and
associated files such as a private key file) without installing the device certificate for an OPC UA™-supported
product, by following the instructions below.
First, start up the SMC Certificate Generator. The following window will appear.
Click the “Manage” button to open the window shown below, to display the device certificates that have been
generated. If more than one certificate is displayed, select the CA certificate that will be used to generate a
device certificate.
Then, click the “Show associated certificates” button.
2023-10-18 12:48
DL400113

-14-
No.DOC1056928
When the following window appears, click the “New” button at the top of the window.
The Configure Certificate window will then appear. Fill in the information required to generate a device
certificate, which is the same as explained in the “Creation and installation of device certificate” section
above.
Once all of the information has been entered, click the “Continue” button to generate the device certificate
file.
Notes:
1. Click the “Add” button to add an item (IP, URI, etc.) to Alternative Names. After adding, select the
item to enter a value.
2. For Common Name (CN) under Identity, enter the value described in Table 1.
2023-10-18 12:48
DL400113

-15-
No.DOC1056928
The following window will appear once the device certificate has been generated:
Click the “Show in folder” button to open a folder containing the generated device certificate file, as shown
below:
The web server of the OPC UA™-supported products allows the device certificate to be viewed. In addition,
the web server allows a device certificate to be installed, when a device certificate file (a security certificate
and KEY file) is available. For further details about the specifications of the web server or how to use it, refer
to the operation manual for the OPC UA™-supported product being used.
2023-10-18 12:48
DL400113

No.DOC1056928
Revision history
4-14-1, Sotokanda, Chiyoda-ku, Tokyo 101-0021 JAPAN
Tel: + 81 3 5207 8249 Fax: [phone]
URL https://www.smcworld.com
Note: Specifications are subject to change without prior notice and any obligation on the part of the manufacturer.
© 2023 SMC Corporation All Rights Reserved
2023-10-18 12:48
DL400113