...
Windows: Default - tries to read the certificate from in Windows Certificate Store. Certificate path must be a valid windows certificate store path e.g. "CurrentUser\My" or "LocalMachine\TrustedPublisher".
Directory: This tries to read the certificate from the file storage.
The subject name of the certificate must match the DNS name of the machine the OPC Server is run on.
Certificate Path: Location to store the server certificate. This can be a file location e.g. "C:\OpcCertificate\" if using Directory certificate type or Certificate Store path e.g. "CurrentUser\My"
...