# Database connection to Oracle with SSL certificate

**URL:** <https://forum.inductiveautomation.com/t/database-connection-to-oracle-with-ssl-certificate/91612>\
**Category:** Ignition\
**Tags:** database\
**Created:** [June 10, 2024, 11:47am UTC](https://forum.inductiveautomation.com/t/database-connection-to-oracle-with-ssl-certificate/91612 "2024-06-10T11:47:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gauthier\_Dabas](https://avatars.discourse-cdn.com/v4/letter/g/e8c25b/32.png) [@Gauthier\_Dabas](https://forum.inductiveautomation.com/u/Gauthier_Dabas)\
**Post date:** [June 10, 2024, 11:47am UTC](https://forum.inductiveautomation.com/t/database-connection-to-oracle-with-ssl-certificate/91612/1 "2024-06-10T11:47:31Z")

</div>

Hello,

We need to configure a database connection from Ignition to Oracle with a SSL certificate.  
Do you know where to place the certificate and how to configure the connection accordingly in the gateway configuration ?  
I don’t see any documentation related.  
Thanks.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [June 10, 2024, 5:41pm UTC](https://forum.inductiveautomation.com/t/database-connection-to-oracle-with-ssl-certificate/91612/2 "2024-06-10T17:41:44Z")

</div>

If you mean that the DB has a TLS certificate that needs to be trusted by Ignition so that the connection can use TLS, then you just need to add the root/CA certificate, or the certificate itself if self-signed, to the Ignition Gateway's supplemental certificates: [Security Certificates | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/platform/security/security-certificates#adding-security-certificates-into-keystores)

If you need to use a client TLS certificate then you'll have to refer to the Oracle JDBC driver documentation to figure out how that's done. I'm not sure how or if it's possible.

---

<div class="post-metadata">

**Author:** ![Gauthier\_Dabas](https://avatars.discourse-cdn.com/v4/letter/g/e8c25b/32.png) [@Gauthier\_Dabas](https://forum.inductiveautomation.com/u/Gauthier_Dabas)\
**Post date:** [June 13, 2024, 8:35am UTC](https://forum.inductiveautomation.com/t/database-connection-to-oracle-with-ssl-certificate/91612/3 "2024-06-13T08:35:40Z")

</div>

Thanks Kevin for your answer.  
The usecase is to use a client TLS certificate.

I succeeded by configuring properly the Oracle JDBC driver, as below:

```python
jdbc:oracle:thin:@(DESCRIPTION=
    (ADDRESS=(PROTOCOL=TCPS)(HOST=xxx)(PORT=2484))
    (CONNECT_DATA=(SERVICE_NAME=xxx))
    (SECURITY=(SSL_SERVER_CERT_DN="xxx"))

```

)

And adding the certificate in `%gateway installation directory%data/certificates/supplemental`