# Cannot connect to production OPC UA server from remote computer

**URL:** <https://forum.inductiveautomation.com/t/cannot-connect-to-production-opc-ua-server-from-remote-computer/64304>\
**Category:** Ignition\
**Tags:** ignition80\
**Created:** [September 20, 2022, 8:05pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-to-production-opc-ua-server-from-remote-computer/64304 "2022-09-20T20:05:10Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ben\_Hunt](https://avatars.discourse-cdn.com/v4/letter/b/0ea827/32.png) [@Ben\_Hunt](https://forum.inductiveautomation.com/u/Ben_Hunt)\
**Post date:** [September 20, 2022, 8:05pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-to-production-opc-ua-server-from-remote-computer/64304/1 "2022-09-20T20:05:10Z")

</div>

I recently migrated our company’s workflow to use git, based on the the [best practices document](https://www.inductiveautomation.com/resources/article/ignition-8-deployment-best-practices) by IA. Makes life much easier but my problem now is accessing the OPC UA server on our production server. I created a new user `dev` with a password in the `opcua-module` on the production side and tried to connect from my computer. My local ignition was able to find the production endpoint but when I finally authenticate with the ‘dev’ user it faults out giving the following error:

```auto
UaException: status=Bad_SecurityChecksFailed, message=certificate path validation failed
	at org.eclipse.milo.opcua.stack.core.util.CertificateValidationUtil.verifyTrustChain(CertificateValidationUtil.java:213)
	at org.eclipse.milo.opcua.stack.core.security.DefaultCertificateValidator.verifyTrustChain(DefaultCertificateValidator.java:45)
	at org.eclipse.milo.opcua.sdk.client.api.identity.UsernameProvider.getIdentityToken(UsernameProvider.java:167)
	at org.eclipse.milo.opcua.sdk.client.session.SessionFsmFactory.activateSession(SessionFsmFactory.java:880)
	at org.eclipse.milo.opcua.sdk.client.session.SessionFsmFactory.lambda$configureActivatingState$17(SessionFsmFactory.java:345)
	at com.digitalpetri.strictmachine.dsl.ActionBuilder$PredicatedTransitionAction.execute(ActionBuilder.java:76)
	at com.digitalpetri.strictmachine.StrictMachine$PollAndEvaluate.lambda$run$0(StrictMachine.java:207)
	at java.base/java.util.ArrayList.forEach(Unknown Source)
	at com.digitalpetri.strictmachine.StrictMachine$PollAndEvaluate.run(StrictMachine.java:198)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)

8.0.12 (b2020042115)
Azul Systems, Inc. 11.0.6

```

I’ve reset the password multiple times on the ‘dev’ user and it still faults. I don’t get any prompt for accepting a new certificate either. What am I missing?

---

<div class="post-metadata">

**Author:** ![Ben\_Hunt](https://avatars.discourse-cdn.com/v4/letter/b/0ea827/32.png) [@Ben\_Hunt](https://forum.inductiveautomation.com/u/Ben_Hunt)\
**Post date:** [September 20, 2022, 8:11pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-to-production-opc-ua-server-from-remote-computer/64304/2 "2022-09-20T20:11:56Z")

</div>

Turns out I need to trust some certificates in the Security Settings of OPC config. All sorted now.