Production-grade PKI management for OPC UA — secure your industrial devices with proper certificates in minutes, not days.
- 🔒 OPC UA compliant — PKI directory structure per Part 6 §6.2.6, out of the box
- 🏗️ Full CA lifecycle — create, sign, revoke, renew certificates and CRLs
- 🖥️ Cross-platform — Windows, Linux, macOS, Alpine, with automatic OpenSSL detection
- 🧩 CLI + API — use from the command line or embed in your Node.js application
- 🛡️ Battle-tested — 12 years of continuous development, powering production OPC UA deployments worldwide
# Create a full PKI with demo certificates — no install needed
npx node-opcua-pki demo
# Create a self-signed certificate
npx node-opcua-pki certificate --selfSigned -o my_cert.pem
# Set up a Certificate Authority
npx node-opcua-pki createCA
npx node-opcua-pki createPKI📖 Full CLI & API reference: packages/node-opcua-pki/readme.md
node-opcua-pki is developed and maintained by Sterfive, the company behind the node-opcua ecosystem.
| Community | Professional | |
|---|---|---|
| Full documentation & CLI | ✅ | ✅ |
| Bug fixes & security patches | Best effort | Priority SLA |
| Security advisories | Public | Early access |
| Custom certificate workflows | — | ✅ |
| Dedicated consulting | — | ✅ |
| PKI architecture review | — | ✅ |
Or contact Sterfive for dedicated consulting and enterprise needs.
If you rely on node-opcua-pki in production, please consider sponsoring us to help maintain this project.
If your company would like to participate and influence the development of future versions, get in touch.
See developer.md for build instructions, project structure, and release process.
MIT — Copyright (c) 2014-2026 Etienne Rossignon / Sterfive