# Ignition 8.0.16 - identity-based encryption

**URL:** <https://forum.inductiveautomation.com/t/ignition-8-0-16-identity-based-encryption/53290>\
**Category:** Ignition\
**Created:** [November 19, 2021, 2:22pm UTC](https://forum.inductiveautomation.com/t/ignition-8-0-16-identity-based-encryption/53290 "2021-11-19T14:22:44Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jardel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jardel/32/27369_2.png) [@jardel](https://forum.inductiveautomation.com/u/jardel)\
**Post date:** [November 19, 2021, 2:22pm UTC](https://forum.inductiveautomation.com/t/ignition-8-0-16-identity-based-encryption/53290/1 "2021-11-19T14:22:44Z")

</div>

Good morning everybody.

We are working to adapt to the CSA - Cloud Security Alliance questionnaire.

And there’s a question about Ignition that we need some help with.

The question:  
**Encryption & Key Management Encryption**  
**Do you support tenant-generated encryption keys or permit tenants to encrypt data to an identity without access to a public key certificate (e.g. identity-based encryption)?**

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 19, 2021, 2:24pm UTC](https://forum.inductiveautomation.com/t/ignition-8-0-16-identity-based-encryption/53290/2 "2021-11-19T14:24:21Z")

</div>

Who are the tenants and what data is in question? 😕

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [November 19, 2021, 2:39pm UTC](https://forum.inductiveautomation.com/t/ignition-8-0-16-identity-based-encryption/53290/3 "2021-11-19T14:39:54Z")

</div>

That sounds like you intend to run Ignition for multiple clients in a single gateway instance in the cloud. This is not a supported configuration.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 19, 2021, 2:41pm UTC](https://forum.inductiveautomation.com/t/ignition-8-0-16-identity-based-encryption/53290/4 "2021-11-19T14:41:20Z")

</div>

It sounds to me like he’s trying to answer a questionnaire meant to be answered by a cloud service provider (AWS, Azure, Digital Ocean, etc.). Even if he was trying to host multiple clients I still don’t think it’s an applicable questionnaire, although the answer for that scenario would certainly be “no”.

---

<div class="post-metadata">

**Author:** ![jardel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jardel/32/27369_2.png) [@jardel](https://forum.inductiveautomation.com/u/jardel)\
**Post date:** [November 19, 2021, 2:42pm UTC](https://forum.inductiveautomation.com/t/ignition-8-0-16-identity-based-encryption/53290/5 "2021-11-19T14:42:15Z")

</div>

> [@Kevin.Herron](#):
>
> Who are the tenants and what data is in question? 😕

In fact, it is essential (due to contractual clauses) that each project is unique. That is, only one client per gateway.

---

<div class="post-metadata">

**Author:** ![jardel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jardel/32/27369_2.png) [@jardel](https://forum.inductiveautomation.com/u/jardel)\
**Post date:** [November 19, 2021, 2:45pm UTC](https://forum.inductiveautomation.com/t/ignition-8-0-16-identity-based-encryption/53290/6 "2021-11-19T14:45:54Z")

</div>

Thank you so much for helping Kevin Herron.

This question has been keeping me awake for a long time xD