# 8.3 designer unable to open Ignition 8.0.4 GW

**URL:** <https://forum.inductiveautomation.com/t/8-3-designer-unable-to-open-ignition-8-0-4-gw/110509>\
**Category:** Ignition 8.3 Early Access\
**Created:** [September 10, 2025, 8:29am UTC](https://forum.inductiveautomation.com/t/8-3-designer-unable-to-open-ignition-8-0-4-gw/110509 "2025-09-10T08:29:35Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![diamond](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@diamond](https://forum.inductiveautomation.com/u/diamond)\
**Post date:** [September 10, 2025, 8:29am UTC](https://forum.inductiveautomation.com/t/8-3-designer-unable-to-open-ignition-8-0-4-gw/110509/1 "2025-09-10T08:29:36Z")

</div>

I’m getting the following error after upgrading the designer:

```python
java.security.cert.CertPathValidatorException: Moderate verification enabled and an old gateway was blocked which does not support Signature Verification

```

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/9/89d843574484e715e662c2657ad74deeb7b56901.png)

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/4/646402d6258a9f56510872144521ce85e4d600dc.jpeg)

---

<div class="post-metadata">

**Author:** ![Daniel\_Kearney](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/daniel_kearney/32/79526_2.png) [@Daniel\_Kearney](https://forum.inductiveautomation.com/u/Daniel_Kearney)\
**Post date:** [September 10, 2025, 10:55am UTC](https://forum.inductiveautomation.com/t/8-3-designer-unable-to-open-ignition-8-0-4-gw/110509/2 "2025-09-10T10:55:23Z")

</div>

There is a default signature verification check (set to `MODERATE`) that will prevent launching against gateway versions 8.1.33 and older. You can reconfigure this check in the launcher `.json` files to be `LENIENT/LOOSE` which will allow these “legacy” gateways.

> **[Launchers and Workstation | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.3/launchers-and-workstation#signature-verification)**
>
> Ignition features several launchable runtimes

---

<div class="post-metadata">

**Author:** ![David\_Stone](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/david_stone/32/79749_2.png) [@David\_Stone](https://forum.inductiveautomation.com/u/David_Stone)\
**Post date:** [October 14, 2025, 4:04am UTC](https://forum.inductiveautomation.com/t/8-3-designer-unable-to-open-ignition-8-0-4-gw/110509/3 "2025-10-14T04:04:31Z")

</div>

Something to add here is this JSON file should be modified with all Designer Launchers closed, otherwise it will rewrite the original settings on exit.

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [October 29, 2025, 11:29pm UTC](https://forum.inductiveautomation.com/t/8-3-designer-unable-to-open-ignition-8-0-4-gw/110509/4 "2025-10-29T23:29:44Z")

</div>

> [@Daniel\_Kearney](#):
>
> LENIENT/LOOSE

This should say “`LENIENT` or `LOOSE`" unless i’m mistaken… using the literal string “LENIENT/LOOSE” gets overwritten with `null`. Setting it to `LOOSE` made mine start working

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 29, 2025, 11:32pm UTC](https://forum.inductiveautomation.com/t/8-3-designer-unable-to-open-ignition-8-0-4-gw/110509/5 "2025-10-29T23:32:19Z")

</div>

Yes, that's right, those are two different values.

The full list:

- `LOOSE` - No revocation checks; allows unsigned jars for older gateways ⚠
- `LENIENT` - Revocation checks not required (soft fail); allows unsigned jars for older gateways ⚠
- `AIR_GAPPED` - No revocation checks at all; allows unsigned jars for older gateways ⚠
- `MODERATE` - Enforces CertPath checks (except expiration) with soft-fail revocation checks
- `STRICT` - Fully enforces CertPath checks (except expiration) including revocation checks ✓

(AI summarized obviously)

edit: ah that list is already in the linked docs!

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [October 30, 2025, 12:16am UTC](https://forum.inductiveautomation.com/t/8-3-designer-unable-to-open-ignition-8-0-4-gw/110509/6 "2025-10-30T00:16:20Z")

</div>

> [@Kevin.Herron](#):
>
> edit: ah that list is already in the linked docs!

I obviously looked in the linked docs 😬 (not) haha