Kaspersky IoT Secure Gateway 100

Securing a connection over the OPC UA protocol

To use a secure connection between the OPC UA client and the OPC UA server:

1. Copy the OPC UA client
   certificate

   Data structure with a digital signature containing a public encryption key and the ID of the client or server.

   to the directory /app/Core/pki/certs/transfer/opc_ua/client on the HW-IDS partition of the microSD card.
2. Copy the OPC UA server certificate to the directory /app/Core/pki/certs/transfer/opc_ua/client on the HW-IDS partition of the microSD card.
3. Copy the private
   encryption key

   Component of a pair of encryption keys used for asymmetric encryption. Keys can be public or private.

   of the OPC UA client to the directory /app/Core/pki/private/transfer/opc_ua/client on the HW-IDS partition of the microSD card.

Data can also be transmitted over the OPC UA protocol without using an encrypted connection. However, a secure connection between the OPC UA client and the OPC UA server cannot be ensured without encryption. It is not recommended to use an unsecured operating mode for Kaspersky IoT Secure Gateway 100.