# Auto-Renewal of Self-Signed Certificates **URL:** \ **Category:** Ignition\ **Created:** [February 7, 2023, 6:32pm UTC](https://forum.inductiveautomation.com/t/auto-renewal-of-self-signed-certificates/69543 "2023-02-07T18:32:08Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\ **Post date:** [February 7, 2023, 6:32pm UTC](https://forum.inductiveautomation.com/t/auto-renewal-of-self-signed-certificates/69543/1 "2023-02-07T18:32:08Z")
Maybe I'm just not searching for the right thing, but I'm curious that if I set up Ignition to use self-signed certificates internally, will they auto-renew when or before they expire, or is this a manual function? By default they're valid for 1 year, so I could also extend it out to like 10 years or longer (is there a limit), but I know this isn't always best practice. We'll be doing this for 2 scenarios. One would be where we have a server that is isolated from the internet and the end customer doesn't have any IT experience and I don't want an expired certificate from causing issues of them losing access because of an expired certificate. The other scenario is where we have a load balancer/reverse proxy in front of the server which handles all SSL termination, so this will only be encrypting data between the front end and proxy/LB, so I don't need a paid certificate as a self-signed is good enough for what we need. (reverse proxy/LB has auto-renewing LetsEncrypt certificate). ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [February 7, 2023, 7:09pm UTC](https://forum.inductiveautomation.com/t/auto-renewal-of-self-signed-certificates/69543/2 "2023-02-07T19:09:32Z")
There's no auto renewal, to my knowledge, but a self-signed cert can have whatever arbitrary expiration you want on it; there's no limit, since by definition a self-signed cert is only valid wherever you declare that you trust it.