# CA Signed Ignition Module - Says it is self signed

**URL:** <https://forum.inductiveautomation.com/t/ca-signed-ignition-module-says-it-is-self-signed/99609>\
**Category:** Module Development\
**Created:** [December 9, 2024, 9:53pm UTC](https://forum.inductiveautomation.com/t/ca-signed-ignition-module-says-it-is-self-signed/99609 "2024-12-09T21:53:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![j.israelsen](https://avatars.discourse-cdn.com/v4/letter/j/ad7895/32.png) [@j.israelsen](https://forum.inductiveautomation.com/u/j.israelsen)\
**Post date:** [December 9, 2024, 9:53pm UTC](https://forum.inductiveautomation.com/t/ca-signed-ignition-module-says-it-is-self-signed/99609/1 "2024-12-09T21:53:58Z")

</div>

This post is similar to one previous, namely: [CA Signed Module Says Self Signed](https://forum.inductiveautomation.com/t/ca-signed-module-says-self-signed/69561)

* * *

Here is where I am at:

1. I followed the steps for signing as outlined here: [Signing with HSM](https://github.com/inductiveautomation/ignition-module-tools/blob/f8ab54a14e4ca0b7899fe67593e4e81e56301925/gradle-module-plugin/SIGNING_VIA_HSM.md)

2. I was able to successfully sign the module:  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/b/1/b1f00d8d74099574487394696ed0bf1aaeb415a2.png)

3. When I imported the module, it says it is self-signed:  

* * *

So my questions are:

1. Is seeing the certificate show up as self-signed when it is actually from a CA when signing via HSM normal behavior?
2. If not, is this to be something concerned about?

Please note, I did have to export my certificate from the HSM to my filesystem (as mentioned at [Signing with HSM](https://github.com/inductiveautomation/ignition-module-tools/blob/f8ab54a14e4ca0b7899fe67593e4e81e56301925/gradle-module-plugin/SIGNING_VIA_HSM.md)). Not sure if this would cause it to show up as self-signed.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [December 9, 2024, 10:21pm UTC](https://forum.inductiveautomation.com/t/ca-signed-ignition-module-says-it-is-self-signed/99609/2 "2024-12-09T22:21:58Z")

</div>

If an issuer is not in java's default list of CAs, or you missed an intermediate certificate that is signed by such a CA, your signature will be considered self-signed.

(Ignition doesn't care--I use my own internal CA for my modules.)