# Certificate renewal in 8.3.1

**URL:** <https://forum.inductiveautomation.com/t/certificate-renewal-in-8-3-1/111789>\
**Category:** Ignition\
**Created:** [October 29, 2025, 1:51pm UTC](https://forum.inductiveautomation.com/t/certificate-renewal-in-8-3-1/111789 "2025-10-29T13:51:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jon.fjolnir.hjartar](https://avatars.discourse-cdn.com/v4/letter/j/fbc32d/32.png) [@jon.fjolnir.hjartar](https://forum.inductiveautomation.com/u/jon.fjolnir.hjartar)\
**Post date:** [October 29, 2025, 1:51pm UTC](https://forum.inductiveautomation.com/t/certificate-renewal-in-8-3-1/111789/1 "2025-10-29T13:51:47Z")

</div>

I’m trying to regenerate an expired certificate in the OPC UA server. According to the manual, there should be a Regenerate option. But in my system, nothing is popping up. Anybody with a fix?

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/9/89491940334d1e0e7fedaa9ec79c12be26fcbdb0.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 29, 2025, 1:53pm UTC](https://forum.inductiveautomation.com/t/certificate-renewal-in-8-3-1/111789/2 "2025-10-29T13:53:51Z")

</div>

It's supposed to be under the three dot menu on the right side of each row, but the UI is broken right now.

Should be fixed in 8.3.2.

If you have an immediate need to regenerate the certificates you can stop the Ignition Gateway, delete them on the filesystem, then start it again, and new ones will be created.

---

<div class="post-metadata">

**Author:** ![jon.fjolnir.hjartar](https://avatars.discourse-cdn.com/v4/letter/j/fbc32d/32.png) [@jon.fjolnir.hjartar](https://forum.inductiveautomation.com/u/jon.fjolnir.hjartar)\
**Post date:** [October 29, 2025, 2:07pm UTC](https://forum.inductiveautomation.com/t/certificate-renewal-in-8-3-1/111789/3 "2025-10-29T14:07:49Z")

</div>

Do you happen to have the correct path so that I don’t mess anything up? 🙂

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 29, 2025, 2:21pm UTC](https://forum.inductiveautomation.com/t/certificate-renewal-in-8-3-1/111789/4 "2025-10-29T14:21:45Z")

</div>

It should be something like these:

- `$IGNITION/data/config/resources/local/com.inductiveautomation.opcua/client-keystore`
- `$IGNITION/data/config/resources/local/com.inductiveautomation.opcua/server-keystore`

Just delete both folders.

---

<div class="post-metadata">

**Author:** ![ggross](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ggross/32/12668_2.png) [@ggross](https://forum.inductiveautomation.com/u/ggross)\
**Post date:** [October 29, 2025, 3:45pm UTC](https://forum.inductiveautomation.com/t/certificate-renewal-in-8-3-1/111789/5 "2025-10-29T15:45:21Z")

</div>

If anyone else stumbles across this, the following is a temporary solution as well that doesn't require manipulation of Gateway files:

> [@\[IGN-14345\] Downloading OPC-UA server certificate in v8.3](https://forum.inductiveautomation.com/t/ign-14345-downloading-opc-ua-server-certificate-in-v8-3/110761/13):
>
> As the fix for this won't be part of 8.3.1, running the following from the browser console when logged into the Gateway will perform the noted action. The change will take effect immediately without having to restart the Gateway. Regenerate the Ignition OPC UA Server Certificate: var csrf; await fetch('/data/app/session', { method: 'get', headers: {'Accept': 'application/json', 'Content-Type': 'application/json'}, }).then(response =\> response.json()).then(data =\> {csrf = data['csrfTo…