# How do I get the certificates installed **URL:** \ **Category:** Archived Topics\ **Created:** [August 2, 2016, 6:49pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998 "2016-08-02T18:49:50Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![codersmurf](https://avatars.discourse-cdn.com/v4/letter/c/df788c/32.png) [@codersmurf](https://forum.inductiveautomation.com/u/codersmurf)\ **Post date:** [August 2, 2016, 6:49pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/1 "2016-08-02T18:49:50Z")
The only documentation for this is in windoze. Thanks, Jake ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 2, 2016, 7:11pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/2 "2016-08-02T19:11:11Z")
Are you asking how to install an SSL certificate that Ignition will use, or something else? ---
**Author:** ![codersmurf](https://avatars.discourse-cdn.com/v4/letter/c/df788c/32.png) [@codersmurf](https://forum.inductiveautomation.com/u/codersmurf)\ **Post date:** [August 2, 2016, 7:14pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/3 "2016-08-02T19:14:31Z")
I’m using letsencrypt for the ca and wanted to get the certs installed into ignition. In windows it talked about copying files to a path, but that path doesn’t exist in linux. Sorry, not a big web guy so I didn’t know where to go from here. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 2, 2016, 7:33pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/4 "2016-08-02T19:33:55Z")
Assuming these instructions: [support.inductiveautomation.com … ertificate](https://support.inductiveautomation.com/index.php?/Knowledgebase/Article/View/28/2/installing-a-ssl-certificate) Use your package manager to install the Oracle Java JDK ([launchpad.net/~webupd8team/+archive/ubuntu/java](https://launchpad.net/~webupd8team/+archive/ubuntu/java)) and then follow from step 3. The instructions are the same, just choose a different path to create your keystore at since you obviously can’t use “C:”. The Ignition install directory will also be different - either something like /usr/local/ignition or wherever you chose to unzip it. As for using letsencrypt… I wouldn’t recommend doing that. All letsencrypt certificates expire in 90 days, so you’ll need to be updating the Ignition SSL certificate, by hand, in perpetuity. Go pay the PKIX cartel for a 3-5 year certificate and save yourself the trouble. ---
**Author:** ![codersmurf](https://avatars.discourse-cdn.com/v4/letter/c/df788c/32.png) [@codersmurf](https://forum.inductiveautomation.com/u/codersmurf)\ **Post date:** [August 2, 2016, 7:56pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/5 "2016-08-02T19:56:56Z")
Hahaha, thx, I’ll do that now. If it were up to me I would go ahead and pay up, but not my call. There’s actually a way to set a cron to auto renew with certbot, I’ll end up using that. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 2, 2016, 8:07pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/6 "2016-08-02T20:07:58Z")
Yeah, but you’re also going to have to automate the part where you import it into the keystore used by Ignition. ---
**Author:** ![codersmurf](https://avatars.discourse-cdn.com/v4/letter/c/df788c/32.png) [@codersmurf](https://forum.inductiveautomation.com/u/codersmurf)\ **Post date:** [August 2, 2016, 10:28pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/7 "2016-08-02T22:28:30Z")
Where is the gateways keystore by the way? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 2, 2016, 10:35pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/8 "2016-08-02T22:35:04Z")
It’s {wherever\_you\_installed\_ignition}/webserver/ssl.key ---
**Author:** ![codersmurf](https://avatars.discourse-cdn.com/v4/letter/c/df788c/32.png) [@codersmurf](https://forum.inductiveautomation.com/u/codersmurf)\ **Post date:** [August 3, 2016, 2:32pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/9 "2016-08-03T14:32:17Z")
So I ran the linux installer, the default dir, there’s some stuff in: ls /var/lib/ignition/ data Gateway temp user-lib ls /etc/ignition/ gateway.xml gateway.xml\_clean ignition.conf log4j.properties There is this: ls /var/lib/ignition/data/certificates/ cert-chain-store cert-chain-store-old gateway\_network I tried the chain, both full and the other one, as the cert-chain-store file and still no good? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 3, 2016, 2:41pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/10 "2016-08-03T14:41:52Z")
Bleh. The installer. What’s in /var/lib/ignition? Is the webserver folder in there? ---
**Author:** ![codersmurf](https://avatars.discourse-cdn.com/v4/letter/c/df788c/32.png) [@codersmurf](https://forum.inductiveautomation.com/u/codersmurf)\ **Post date:** [August 3, 2016, 2:54pm UTC](https://forum.inductiveautomation.com/t/how-do-i-get-the-certificates-installed/11998/11 "2016-08-03T14:54:19Z")
Found it, for ref it’s in /usr/local/bin/ignition