Change the OPC UA server's port

You can modify the default port on the workstation OPC UA server using this procedure.

From DeltaV Explorer, select the OPC UA server node.
Right click and select Properties from the context menu.
Select the OPC UA Server subsystem. In the right pane, select the endpoint URL. Right click and select Properties.
Edit the port number in the Port field.

Note

This changes the Endpoint Url field after downloading.
Click OK to save the change.
Download the OPC UA server.
To copy the new endpoint URL for your OPC UA clients, go back to the endpoint's Properties dialog.
For workstation servers using HTTPS endpoint URL, get the following information about the existing bound certificate using the netsh command.
- Certificate Hash
- Application ID
1. From the Start menu, open a command prompt.
2. Type netsh http show sslcert ipport=0.0.0.0:[PORT] and press Enter.
  The port is 9408 by default.
3. Highlight the number needed and press Ctrl C to copy it.
4. In a text editor, paste the number (label it for use later).
5. Repeat for the other number.
For workstation servers using HTTPS endpoint URL, delete the existing certificate binding (the old port):
netsh http delete sslcert ipport=0.0.0.0:[PORT]

The port is 9408 by default.
For workstation servers using HTTPS endpoint URL, bind the certificate to the new port:
netsh http add sslcert ipport=0.0.0.0:[PORT] certhash=[CERTHASH] certstorename=Root appid=[APPGUID]
When using a self-signed certificate, the certstorename parameter is set to my.
For workstation servers using HTTPS endpoint URL, verify that the SSL certificate has been bound to the new port:
netsh http show sslcert ipport=0.0.0.0:[PORT]

The software displays the SSL certificate bindings.
Open the new port on any firewalls (including Windows firewalls) between the OPC UA server and its clients for all protocols that you are using (HTTP, HTTPS, OPC.TCP).