Online Forums
Technical support is provided through Support Forums below. Anybody can view them; you need to Register/Login to our site (see links in upper right corner) in order to Post questions. You do not have to be a licensed user of our product.
Please read Rules for forum posts before reporting your issue or asking a question. OPC Labs team is actively monitoring the forums, and replies as soon as possible. Various technical information can also be found in our Knowledge Base. For your convenience, we have also assembled a Frequently Asked Questions page.
Do not use the Contact page for technical issues.
- Forum
- Discussions
- QuickOPC-UA in COM
- Connection, Reconnections, Certificates
- OPC-UA service result - Could not create a certificate via a proxy
OPC-UA service result - Could not create a certificate via a proxy
Regards
Please Log in or Create an account to join the conversation.
- mihaela.chirita
- Topic Author
- Offline
- Senior Member
- Posts: 5
- Thank you received: 0
This error occured since the very begining - I understand that because I dind't run my app with administrator rights; after that I've tried many solutions to generate the certificate required, eg.: using the Opc.Ua.CertificateGenerator.exe.
Even if I save as another name, and change the application parameters and run the new excel file as administrator, the QuickOPC is not invoke the certificate generation - still have the same error.
Regards,
Mihaela
Please Log in or Create an account to join the conversation.
It was your choice to call Opc.Ua.CertificateGenerator.exe directly. I would normally attempt to proceed differently, and figure out a way to let QuickOPC invoke the ceriticate generation, in which case the computer name would match.
But anyway, the Opc.Ua.CertificateGenerator.exe has many options (and some help switch), and one of them is "-subjectName", followed by the subject name. This should match the one QuickOPC is looking for. The computer name is then part of the subject name, I think.
Best regards
Please Log in or Create an account to join the conversation.
- mihaela.chirita
- Topic Author
- Offline
- Senior Member
- Posts: 5
- Thank you received: 0
Yes, that's exacly right! I've looked to the log entries and I beleve the computer name - of course; it's different...
Then how I should proceed to generate the certificate on another PC, so that my app will work? I hope you have a quick solution for me since I already lost so many time.
Thank you for your time and help.
Regards,
Mihaela
Please Log in or Create an account to join the conversation.
do I understand it correctly that you have run the Opc.Ua.CertificateGenerator.exe tool with elevated privileges (from the command line), in order to generate the certificate and safe it into the certificate store, but then you still get the error when running the QuickOPC app?
If so, I think the issue is now that the subject name of the generated certificate is not what the QuickOPC app expects (or, the certificate is not in the correct certificate store). Because, if the certificate was present in the right store and with the right name, the QuickOPC app will not try to generate it (and give the "Could not create a certificate via a proxy" error); instead, it would simply load it from the store and use it.
So, I suggest that you focus now on investigating this. Remember that it is not just the application name that is used for the match. It is the "subject name", and it consists of the application, and other things such as the computer name.
Tools and hints that can help you with that:
A. OPC UA Configuration Tool - see www.opclabs.com/products/ua-configuration-tool . Use it to check which certs you have and in which store.
B. The static EasyUAClient.LogEntry event (in COM, it is mapped to EasyUAClientConfiguration.LogEntry). In your app (or any testing app that has the same issue), try to hook to it and store all events it generates. There will be events that mention that certificate subject name, and what is happening around the certificate lookup and generation. Examples: opclabs.doc-that.com/files/onlinedocs/QuickOpc/Latest/User%2...ure%20-%20Event%20logging.html
Best regards
Please Log in or Create an account to join the conversation.
- mihaela.chirita
- Topic Author
- Offline
- Senior Member
- Posts: 5
- Thank you received: 0
Yes, I believe that this is the reason why I get this error. I've tried to run as administrator some batch file where I am issue a certificate:
start /d "C:\Program Files (x86)\UA Configuration Tool 1.03" Opc.Ua.CertificateGenerator.exe -cmd issue -sp . -an QualityOPC-Ua
but I still have same error message
Regards,
Mihaela
Please Log in or Create an account to join the conversation.
one thing to check is that when the application is run the first time (or EasyUAClient.Install is called), it needs administrator account and run with elevated privileges - this is needed so that the generated application certificate can be saved to the certificate store.
Cannot that be the reason?
Please Log in or Create an account to join the conversation.
- mihaela.chirita
- Topic Author
- Offline
- Senior Member
- Posts: 5
- Thank you received: 0
Sorry that I skiped some details.
The entire error is:
"[System.__ComObject] *** Failure -2147483648 (0x80000000): OPC-UA service result - Could not create a certificate via a proxy: The operation completed successfully = Bad."
And it occurs when I am trying to subscribe for multiplemonitored items, only from another pc then mine.
QuickOPC 2018.3 (5.54.1085.1) Full is the version which I am using.
Thank you for your support!
Regards,
Mihaela
Please Log in or Create an account to join the conversation.
I do not understand what the problem is. In the subject, you have used a (partial) error message. But in the text, you show several pieces of code, and do not say where the error occurs. In addition, it is very important to know the precise and full text of the error, and I believe that what you have put in the subject is not the entire text.
Also, which version of QuickOPC are you using?
Regards
Please Log in or Create an account to join the conversation.
- mihaela.chirita
- Topic Author
- Offline
- Senior Member
- Posts: 5
- Thank you received: 0
I am facing some problems with creating the certificate for an Excel Application which should be used on several PC's.
I was trying to set the ApplicationName as described on your documentation (see bellow)
Dim ClientConfiguration As EasyUAClientConfiguration
Private Sub Workbook_Open()
Set ClientConfiguration = New EasyUAClientConfiguration
ClientConfiguration.SharedParameters.EngineParameters.ApplicationParameters.ApplicationName = "QualityOPC-Ua"
Call InitializeSettingData
End Sub
I understand that I should write a small install that will generate the certificate for my excel app; I've been trying - till now whitout success, to make a .bat file or .js that sets the parameters needed, like for example:
var EasyUAClientConfig = new ActiveXObject("OpcLabs.EasyOpc.UA.EasyUAClientConfiguration");
EasyUAClientConfig.SharedParameters.EngineParameters.ApplicationParameters.ApplicationCertificateSubject = "QualityOPC-Ua";
EasyUAClientConfig.SharedParameters.EngineParameters.ApplicationParameters.ApplicationName = "QualityOPC-Ua";
EasyUAClientConfig.SharedParameters.EngineParameters.ApplicationParameters.ApplicationUriString = "urn:br-automation/BR/UA/EmbeddedServer";
EasyUAClientConfig.SharedParameters.EngineParameters.ApplicationParameters.ProductUriString = "QualityOPC-Ua";
var EasyUAClient = new ActiveXObject("OpcLabs.EasyOpc.UA.EasyUAClient");
EasyUAClient.Install();
If you can maybe please provide some quick solution that will work it will be very appreciate!
Thank you,
Mihaela
Please Log in or Create an account to join the conversation.
- Forum
- Discussions
- QuickOPC-UA in COM
- Connection, Reconnections, Certificates
- OPC-UA service result - Could not create a certificate via a proxy