The OPC UA Certificate Management Client is a specialized OPC UA client object providing access to certificate management (CM) information model of an OPC UA Global Discovery Server (GDS). In the OPC UA specifications, the functionality covered by this type is described in Part 12: Discovery and Global Services, in the section Certificate Management Overview.

This specialized client object can be derived from IEasyUAClient Interface using the AsCertificateManagementClient Extension Method, or it can be created standalone as EasyUACertificateManagementClient Component.

This interface contains methods to communicate with the OPC UA Global Discovery Server (GDS) using its information model for certificate management, making the work of assembling the proper OPC UA method parameters and retrieving the results. The methods allow getting certificate groups, requesting key pairs or certificate signing and obtaining the results, retrieving trust lists, and more.

Available methods are:

• BrowseCertificateGroups Method. Browses the certificate groups available in the Certificate Management information model.
• BrowseCertificateTypeTree Method. Browses the certificate types available in the Certificate Manager.
• FinishRequest Method. Finishes a certificate request started with a call to StartNewKeyPairRequest Method or StartSigningRequest Method.
• GetCertificateGroupElement Method. Returns the certificate group element for a given certificate group Id.
• GetCertificateGroupIds Method. Returns Ids of the certificate groups assigned to application.
• GetCertificateStatus Method. Checks if an application needs to update its certificate.
• GetTrustList Method. Retrieves the node ID of a trust list assigned to an application.
• StartNewKeyPairRequest Method. Starts a request for a new certificate and private key. The certificate and private key are returned in the FinishRequest response.
• StartSigningRequest Method.  Initiates a request to create a certificate which uses the private key which the caller currently has. The new certificate is returned in the FinishRequest response.

There are also helper classes are available that relate to certificate management:

• UACertificateGroupIds Class. A class that declares constants for certificate group Ids.
• UACertificateTypeIds Class. A class that declares constants for certificate type Ids.