Issue Details
After formatting an InsightCM Real-Time (RT) controller, the controller can have issues with its Open Platform Communications Unified Architecture (OPC UA) certificates. This causes the OPC UA tags to report as invalid, or puts the controller into an invalid configuration state, showing error 356608 in the controller log.
Prerequisites
NI Measurement & Automation Explorer (NI MAX) installed via the cRIO drivers (version 25 Q4).
Access to the InsightCM server.
An SFTP client, such as WinSCP or MobaXterm.
The controller's IP address and administrator credentials.
Table of Contents
Confirm the Error in the Controller Log
Reset the OPC UA Certificate Store
Instructions/Solution
Enable SSH on the Controller
1. In NI MAX, enable Secure Shell (SSH) on the controller.
Note: In newer versions, the SSH checkbox may not be available due to the firmware version of the controller. See the NI article Enabling SSH on NI Linux Real-Time Targets for additional information.
Confirm the Error in the Controller Log
2. In a web browser, open the controller log file to confirm error 356608 is present: http://<IP address>/files/home/lvuser/natinst/LabVIEW%20Data/InsightCM/app/logs/log.txt
Reset the OPC UA Certificate Store
3. Open WinSCP or MobaXterm, connect to the controller, and browse to /var/local/natinst/certstore/opcua. If the opcua folder is missing, create it.
4. Right-click the folder, select Properties, and check all the permission boxes so the octal value reads 0777.
5. Check the bottom box Set owner, group and permissions recursively, then click OK.
6. Open the folder and delete all files inside it (the certificate and the .pem file).
7. Reboot the controller.
Verify the Fix
8. Go back to WinSCP (or MobaXterm) and confirm that a new certificate was generated in the opcua folder.
9. In InsightCM, confirm the OPC UA tags are reading values.
Outcome
This procedure forces the server to issue a new certificate with the correct information in it, allowing the controller to re-establish communication with the devices. The OPC UA tags read values again.
Additional Information
For more details about OPC UA certificates on NI targets, see the NI article: OPC UA Certificate Information.
Do you need more help?
Submit your questions or requests using the Support Ticket Submission form.