# How to generate opc ua certificate file for ignition

**URL:** <https://forum.inductiveautomation.com/t/how-to-generate-opc-ua-certificate-file-for-ignition/73181>\
**Category:** Ignition\
**Tags:** ignition80\
**Created:** [May 3, 2023, 6:23am UTC](https://forum.inductiveautomation.com/t/how-to-generate-opc-ua-certificate-file-for-ignition/73181 "2023-05-03T06:23:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![huyao](https://avatars.discourse-cdn.com/v4/letter/h/aeb1de/32.png) [@huyao](https://forum.inductiveautomation.com/u/huyao)\
**Post date:** [May 3, 2023, 6:23am UTC](https://forum.inductiveautomation.com/t/how-to-generate-opc-ua-certificate-file-for-ignition/73181/1 "2023-05-03T06:23:31Z")

</div>

Ignition Version: 8.0.10 (b2020031912)  
There is a problem that a project with ignition installed a few years ago, opc ua client can not connect with opc ua server, logs showd

- 

[remote=/192.168.6.6:4096] Received error message: ErrorMessage{error=StatusCode{name=Bad\_CertificateTimeInvalid

Certificate file expired, but where can we download a new valid file, i didn't find any field to generate a new file in gateway.  
Did someone else meet the same issue? Any advise will be appreciated

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [May 3, 2023, 12:25pm UTC](https://forum.inductiveautomation.com/t/how-to-generate-opc-ua-certificate-file-for-ignition/73181/2 "2023-05-03T12:25:35Z")

</div>

Similar recent topic:

> [@Bad\_Certificate](https://forum.inductiveautomation.com/t/bad-certificate/73016):
>
> Inductive Automation Are there any plans on fixing the annual certificate failures? Seams to me that if the server can generate a new certificate, it should have the authority to delete or add a new certification, if it notices the old one has expired. Other users like myself What does the 'brain trust' think?

You have to delete the offending certificate and restart. Ignition will make a new one, with another three-year validity period. Use the remote's UI to accept Ignition's new certificate.

Consider upgrading to take advantage of the option to create longer validity periods in the new UI.

{ v8.0.10 is ancient and buggy and hasn't been supported for a couple years now. This isn't the only reason to upgrade. }

---

<div class="post-metadata">

**Author:** ![huyao](https://avatars.discourse-cdn.com/v4/letter/h/aeb1de/32.png) [@huyao](https://forum.inductiveautomation.com/u/huyao)\
**Post date:** [May 4, 2023, 12:40am UTC](https://forum.inductiveautomation.com/t/how-to-generate-opc-ua-certificate-file-for-ignition/73181/3 "2023-05-04T00:40:19Z")

</div>

Thanks,that works.