# Designer SSL Client Certificates

**URL:** <https://forum.inductiveautomation.com/t/designer-ssl-client-certificates/95908>\
**Category:** Ignition\
**Tags:** ignition81, scripting\
**Created:** [September 12, 2024, 4:37pm UTC](https://forum.inductiveautomation.com/t/designer-ssl-client-certificates/95908 "2024-09-12T16:37:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ryanjmclaughlin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ryanjmclaughlin/32/4318_2.png) [@ryanjmclaughlin](https://forum.inductiveautomation.com/u/ryanjmclaughlin)\
**Post date:** [September 12, 2024, 4:37pm UTC](https://forum.inductiveautomation.com/t/designer-ssl-client-certificates/95908/1 "2024-09-12T16:37:01Z")

</div>

Just upgraded to 8.1.43 and having a heck of a time with SSL when using HTTPClient() in designer script console.

We had all the supplemental certs installed on both the Designer Launcher and on the gateway. I have cleared all the local cache on my machine and re-installed the designer launcher, but no matter what I do it seems to download a JRE from the server without my custom internal Certs.

The launcher works fine as its using the system cert store. The GW is fine as well. I tried setting the `custom.jre.path` setting in the launcher config but then the login button on the designer just does nothing.

Is something mis-configured? How can I get the designer to do what it used to and just use the jre bundled with the launcher and respect the certificates in `clientlauncher-data` folder.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [September 12, 2024, 4:50pm UTC](https://forum.inductiveautomation.com/t/designer-ssl-client-certificates/95908/2 "2024-09-12T16:50:27Z")

</div>

Try setting the trust store property to system in the application config?

> **[Launcher Settings | Ignition User Manual](https://www.docs.inductiveautomation.com/docs/8.1/launchers-and-workstation/launcher-settings#trust-stores)**
>
> Launcher Settings

That way the launcher 'injects' the appropriate security context into the actual launched designer/client, which is what's used by system.net.httpClient.

At least, in theory 🤷‍♂️

---

<div class="post-metadata">

**Author:** ![ryanjmclaughlin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ryanjmclaughlin/32/4318_2.png) [@ryanjmclaughlin](https://forum.inductiveautomation.com/u/ryanjmclaughlin)\
**Post date:** [September 12, 2024, 5:10pm UTC](https://forum.inductiveautomation.com/t/designer-ssl-client-certificates/95908/3 "2024-09-12T17:10:10Z")

</div>

Yeah, already have `"trust.store": "system"` in my setup ☹ Maybe that "injection" is broken?

Also a \_\_JAVA\_OPTION system entry as a fallback for all my other java apps that have issues with our internal security stuff

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/1/8175bd093d1651fc373bcfd78a353e1cc105eebb.png)