Generating a .pem certificate

A self-signed certificate is required to secure the flow of data between the station and the native process that serves as a bridge to the management server. You will bind this certificate to the management server running on a Windows computer.
Prerequisites: You are working in Workbench on a PC. You are connected to the Supervisor station.
This procedure uses the Workbench certificate management tool to create and export a certificate, a third-party utility to convert the certificate’s exported .pem file to a .pfx file for importing into the Windows certificate store and to binding to the native process port (9117).
Perform the following steps:
  1. Click Tools > Certificate Management.

    The Certificate Management for Niagara Workbench view opens.

    Image
  2. To create the new server certificate, click New.
    The Generate Self Signed Certificate window opens.
    Image

    This window defaults to create a Server certificate. The name of the certificate in this example is certxprotect.

  3. Give the certificate an Alias (a name), fill in at least the required properties including the Country Code, Certificate Usage (Server) and click OK.
    The system generates the certificate and adds it to the other certificates in the User Key Store.
  4. To export the certificate with its private key, click Export, enable Export the private key, create a strong Password to protect the private key and click OK.
    The Certificate Export window opens.
    Image

    The screen capture shows the certificate in the Niagara user home and the key just before saving it to the same home location.

  5. Enter a name for just the key, click Save and confirm that the export was successful by clicking OK.
    In this example, the name of the certificate is: certxprotect.
  6. As a best practice make a note of the private key password and store it in a safe location.
This creates the .pem file in your C:\Users\[username]\[frameworkx.x]\tridium\certManagement folder, where [username] is unique for your computer and frameworkx.x is the version of the Niagara framework.