How do you sign a unsigned modl file

I have compiled this file.
How the heck do you sign it so I can use it in maker.
I looked here:

and here:
and here:

How do you make a self-generated and self-signed code signing certificate.

This is really 2 topics in one.

  1. Generating a certificate
  2. Signing a module

Signing a module is relatively straightforward with the tool the IA provides.

Certificates have more to do with security than Ignition. You might want to consult other documentation such as the following:

Hope this helps!


I was able to create the signed module.
But when I go to install in ignition gateway I get this error: signed fields invalid

Hers log that pertains to error: signed fields invalid

at java.base/ Source)

at java.base/ Source)

at java.base/ Source)

at java.base/ Source)

at java.base/ Source)

at com.inductiveautomation.ignition.common.util.SecurityUtils.parseX509Certificates(

at com.inductiveautomation.ignition.common.util.SecurityUtils.parseX509Certificates(

at com.inductiveautomation.ignition.gateway.web.pages.config.ModuleInstallPage.eulaCertCheck(

at com.inductiveautomation.ignition.gateway.web.pages.config.ModuleInstallPage$1.onSubmitInternal(

at com.inductiveautomation.ignition.gateway.web.components.CsrfPreventingForm.onSubmit(

Check your keystore. That message normally means the certificate / keystore is malformed in some way. Make sure you’re using a Code Signing Certificate and that you’ve properly built your .jks or .pfx that you’re using with module-signer.jar.

You can open your .modl by renaming it to a .zip and looking at your certificates.p7b inside. If you’re running Windows, double clicking it should pull up the info on the certs contained within. If there’s a problem with it, which it seems like there is, I don’t think Windows is likely to be able to open it either.

Does this procedure have to be doe on a windows PC?
I have been doing all this on Ubuntu machine

There’s no requirement for Windows. Generating the keystore and running the module-signer.jar on Linux should be fine.