Certificate Management
The certificate management page provides functions for uploading, generating, exporting, and deleting certificates, supporting management of CA certificates, server certificates, and client certificates.
Feature Entry
Click "Certificate Management" in the left menu to enter the management page.
Certificate List
| Column | Description |
|---|---|
| Certificate Name | Certificate identifier name |
| Purpose | CA certificate/Server/Client |
| Format | PFX/PEM/CER/DER |
| Subject | Certificate subject name |
| Issuer | Certificate issuer |
| Validity Period | Certificate validity period range |
Certificate Purposes
| Purpose | Description |
|---|---|
| CA Certificate | Root certificate, used to issue other certificates. A CA certificate must be created first before issuing server/client certificates |
| Server | Server-side certificate, used for TLS encrypted communication. Required when configuring OPC UA, HTTPS, and other protocols |
| Client | Client certificate, used for mutual authentication (mTLS). In some scenarios with high security requirements, the client needs to provide a certificate |
Certificate Filtering
The page supports filtering certificates by the following criteria:
| Filter Criteria | Description |
|---|---|
| Certificate Name | Search by name keyword |
| Purpose | Filter by CA/Server/Client |
| Format | Filter by PFX/PEM/CER/DER |
Operation Functions
| Function | Description |
|---|---|
| Upload Certificate | Upload existing certificate file |
| Generate CA Certificate | Generate a new CA root certificate |
| Generate Server Certificate | Generate a server-side certificate |
| Generate Client Certificate | Generate a client certificate |
| Edit | Edit certificate information |
| Export | Export certificate file |
| Delete | Delete certificate |
| Batch Delete | Batch delete selected certificates |
| Refresh | Refresh certificate list |
Upload Certificate
Click "Add → Upload Certificate" to open the upload dialog:
Configuration Items
| Field | Description |
|---|---|
| Certificate Name | Certificate identifier name |
| Certificate Purpose | CA/Server/Client |
| Certificate Format | PFX/PEM/CER/DER. PFX: Binary format with private key (commonly used on Windows); PEM: Base64 text format (commonly used on Linux); CER/DER: Certificate format with public key only |
| Certificate File | Certificate file |
| Private Key File | Private key file (PEM format) |
| Password | Certificate password (PFX format) |
Generate CA Certificate
Click "Add → Generate CA Certificate" to open the generation dialog:
Configuration Items
| Field | Description |
|---|---|
| Certificate Name | Certificate identifier name |
| Subject Name | Certificate subject name, e.g. My Root CA |
| Validity Period | Certificate validity period (years), maximum 50 years |
| Key Length | 2048-bit or 4096-bit |
| Certificate Password | Optional, used to protect the certificate |
Generate Server Certificate
Click "Add → Generate Server Certificate" to open the generation dialog:
Configuration Items
| Field | Description |
|---|---|
| Certificate Name | Certificate identifier name |
| Subject Name | Certificate subject name, e.g. server.example.com |
| CA Certificate | Select the CA certificate used for issuance |
| SAN Domains | Subject Alternative Name domain list, supports multi-value input |
| SAN IP Addresses | Subject Alternative Name IP address list, supports multi-value input |
| Validity Period | Certificate validity period (years), maximum 10 years |
| Key Length | 2048-bit or 4096-bit |
| Certificate Password | Optional, used to protect the certificate |
SAN Configuration Description
SAN (Subject Alternative Name) is an extension field of the certificate, used to specify the valid domains and IP addresses of the certificate. After configuring SAN, the certificate can support access from multiple domains and IP addresses.
Use Cases:
- Server has multiple domains that need access
- Server has multiple IP addresses that need access
- Using IP addresses for access in intranet environments
Operation Method:
- Enter a domain or IP address in the input box and press Enter to add
- Supports adding multiple values
Generate Client Certificate
Click "Add → Generate Client Certificate" to open the generation dialog:
Configuration Items
| Field | Description |
|---|---|
| Certificate Name | Certificate identifier name |
| Subject Name | Certificate subject name, e.g. client1 |
| CA Certificate | Select the CA certificate used for issuance |
| Validity Period | Certificate validity period (years), maximum 10 years |
| Key Length | 2048-bit or 4096-bit |
| Certificate Password | Optional, used to protect the certificate |
Export Certificate
Click the "Export" button in the certificate list to open the export dialog:
Export Configuration
| Field | Description |
|---|---|
| Export Format | PEM/PFX/CER/DER |
| Include Private Key | When PEM format, can choose whether to include private key |
| Export Password | Optional, used to protect the exported certificate |
Export Format Description
| Format | Description |
|---|---|
| PEM | Base64 encoded text format, commonly used on Linux systems |
| PFX | Binary format, contains certificate and private key, commonly used on Windows systems |
| CER | Binary format, contains certificate only |
| DER | Binary format, contains certificate only |
Export Result
After successful export, certificate details and export content will be displayed:
| Content | Description |
|---|---|
| Certificate (PEM) | Certificate content in PEM format, supports copy and download |
| Private Key (PEM) | Private key content in PEM format, supports copy and download |
| PFX File | Binary file download in PFX format |
| CER Content | Certificate content in CER format |
| DER File | Binary file download in DER format |
Related Links
- System Settings - Gateway system configuration
- Plugin Management - Plugin enable and disable