# OPC Data Source with sign and encryption

**URL:** <https://community.tulip.co/t/opc-data-source-with-sign-and-encryption/4946>\
**Category:** Support, Troubleshooting, & Help\
**Created:** [April 7, 2022, 6:41pm UTC](https://community.tulip.co/t/opc-data-source-with-sign-and-encryption/4946 "2022-04-07T18:41:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kirons](https://avatars.discourse-cdn.com/v4/letter/k/d6d6ee/32.png) [@kirons](https://community.tulip.co/u/kirons)\
**Post date:** [April 7, 2022, 6:41pm UTC](https://community.tulip.co/t/opc-data-source-with-sign-and-encryption/4946/1 "2022-04-07T18:41:13Z")

</div>

When setting up an OPC data source, if Sign & Encrypt is selected for the Security Mode, Tulip is looking for a Private Key and Certificate file. I assume the certificate file can be created from the .der file from the OPC server (KepServer in my case).

Questions:  
Where does the Private Key come from?  
Is this something that comes from the OPC server also?  
How do I create the Private Key file?

---

<div class="post-metadata">

**Author:** ![DewyWCI](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/dewywci/32/3195_2.png) [@DewyWCI](https://community.tulip.co/u/DewyWCI)\
**Post date:** [April 13, 2022, 1:03pm UTC](https://community.tulip.co/t/opc-data-source-with-sign-and-encryption/4946/2 "2022-04-13T13:03:39Z")

</div>

I’m looking into getting Sign&Encrypt setup as well but cant seem to find any info related to it in Kepware help files.

Maybe @royshilkrot /@Het/or any other users who’s set this up can point us in the right direction?