# Ignition 8.1- How to automatically Trust Signed Certificates

**URL:** <https://forum.inductiveautomation.com/t/ignition-8-1-how-to-automatically-trust-signed-certificates/79064>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [September 13, 2023, 8:42am UTC](https://forum.inductiveautomation.com/t/ignition-8-1-how-to-automatically-trust-signed-certificates/79064 "2023-09-13T08:42:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anastasios\_Kavvadias](https://avatars.discourse-cdn.com/v4/letter/a/ecb155/32.png) [@Anastasios\_Kavvadias](https://forum.inductiveautomation.com/u/Anastasios_Kavvadias)\
**Post date:** [September 13, 2023, 8:42am UTC](https://forum.inductiveautomation.com/t/ignition-8-1-how-to-automatically-trust-signed-certificates/79064/1 "2023-09-13T08:42:52Z")

</div>

Ignition 8.1 gateway tries to connect with an external opc ua server. The server sends us (Ignition gateway) Signed Certificates. The device connection remains inactive unless we accept (Trust) the certificate on Ignition gateway side. Then the device connects straight away. This works great for one device, but what if we have hundreds of devices? Is there a way to automatically Trust signed certificates?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 13, 2023, 12:04pm UTC](https://forum.inductiveautomation.com/t/ignition-8-1-how-to-automatically-trust-signed-certificates/79064/2 "2023-09-13T12:04:02Z")

</div>

The only way this would work without intervention is if all of the servers were using certificates issued by a common CA, which you would add as a trusted certificate to Ignition's OPC UA client trust store.

> [@Anastasios\_Kavvadias](#):
>
> The device connection remains inactive unless we accept (Trust) the certificate on Ignition gateway side. Then the device connects straight away.

You should get prompted to trust the certificate during the connection setup, rather than having to navigate to the security section after the fact.

OPC UA connections aren't defined programmatically right now anyway, so you'd have a chance to do this step for each connection you set up...