# Designer Launcher Trust SSL Cert **URL:** \ **Category:** Ignition\ **Created:** [November 10, 2021, 10:45pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950 "2021-11-10T22:45:19Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![jacob.ramirez](https://avatars.discourse-cdn.com/v4/letter/j/9dc877/32.png) [@jacob.ramirez](https://forum.inductiveautomation.com/u/jacob.ramirez)\ **Post date:** [November 10, 2021, 10:45pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950/1 "2021-11-10T22:45:20Z")
After I installed a SSL certificate, I was not able to launch the Desinger. Here is the error I’m getting when selecting the option to trust the SSL cert. ![DesignerLauncherError](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/a/8ad586581e9a022ed7d255b7a5c90a87de2fe809.jpeg) Any ideas on what the problem is from that error? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [November 10, 2021, 10:46pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950/2 "2021-11-10T22:46:33Z")
The Subject Alternative Name extension on your certificate does not contain an entry with that IP address. Where did you get the certificate? ---
**Author:** ![jacob.ramirez](https://avatars.discourse-cdn.com/v4/letter/j/9dc877/32.png) [@jacob.ramirez](https://forum.inductiveautomation.com/u/jacob.ramirez)\ **Post date:** [November 10, 2021, 11:04pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950/3 "2021-11-10T23:04:22Z")
I got it from GoDaddy. The IP shown is not the public IP address of the server but the private (accessed over a VPN). I want the designer to connect to the gateway using the private IP address. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [November 10, 2021, 11:07pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950/4 "2021-11-10T23:07:53Z")
Sorry, that won’t be possible when using a real certificate issued by a public CA. When connecting via HTTPS the certificate _must_ contain an entry for the IP address or hostname you are connecting to. Public CAs will not issue you a certificate containing a reserved/private IP address. If you leave HTTP enabled (don’t force redirects) you might be able to access the private IP that way, though I’m sure the “Public HTTP Address” settings are probably pointing to the public secured address… ---
**Author:** ![jacob.ramirez](https://avatars.discourse-cdn.com/v4/letter/j/9dc877/32.png) [@jacob.ramirez](https://forum.inductiveautomation.com/u/jacob.ramirez)\ **Post date:** [November 10, 2021, 11:11pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950/5 "2021-11-10T23:11:00Z")
So this setting here: Force Secure Redirect When enabled, and if SSL / TLS is enabled, all http traffic will be redirected to its https counterpart. (Default: disabled) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [November 10, 2021, 11:11pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950/6 "2021-11-10T23:11:55Z")
Yes, that one. I’m not 100% sure this will work though. But you’d make sure that is disabled and then just point your Designer at the private IP and the unsecured port. ---
**Author:** ![jacob.ramirez](https://avatars.discourse-cdn.com/v4/letter/j/9dc877/32.png) [@jacob.ramirez](https://forum.inductiveautomation.com/u/jacob.ramirez)\ **Post date:** [November 10, 2021, 11:14pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950/7 "2021-11-10T23:14:54Z")
That did it but now the domain name is not redirecting to the proper URL. I may need to adjust my nginx config file to get this to work properly. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [November 11, 2021, 1:51pm UTC](https://forum.inductiveautomation.com/t/designer-launcher-trust-ssl-cert/52950/8 "2021-11-11T13:51:24Z")
Or run a local DNS that has an entry pointing the public name at the 10.\* address.