# Issue with Perspective Mobile App certificate on Android **URL:** \ **Category:** Ignition\ **Tags:** perspective\ **Created:** [April 7, 2026, 1:31pm UTC](https://forum.inductiveautomation.com/t/issue-with-perspective-mobile-app-certificate-on-android/114918 "2026-04-07T13:31:08Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Matthew\_Karee](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/matthew_karee/32/63956_2.png) [@Matthew\_Karee](https://forum.inductiveautomation.com/u/Matthew_Karee)\ **Post date:** [April 7, 2026, 1:31pm UTC](https://forum.inductiveautomation.com/t/issue-with-perspective-mobile-app-certificate-on-android/114918/1 "2026-04-07T13:31:08Z")
I am attempting to set up the Perspective app on an Android tablet to create an inventory scanning station in our clean room (I want to use the tablet’s camera as a barcode scanner). First off, I am able to connect to the Ignition gateway in a web browser on the tablet so I don’t think this is a firewall issue. I’ve entered in the IP address of the host device (Opto 22 Groov EPIC) and port 8043 (so, 192.168.3.206:8043) in the Gateway URL field after clicking Manually Input Gateway. On the next screen, when I select “Import to App (Default)”, then “Next: Install Certificate”, then “Trust Certificate”, I get the error message: “Certificate Error. Unable to reach gateway after installing certificate.” I have also tried port 8060 and 8088, and I’ve tried entering in both http:// and https:// as the prefix to the URL with all three ports, to no avail. I have also tried Import to Device with all of these combinations and get the warning from the Android tablet itself: “Private key required to install certificate”. Has anyone encountered this issue with the mobile app? ---
**Author:** ![Matthew\_Karee](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/matthew_karee/32/63956_2.png) [@Matthew\_Karee](https://forum.inductiveautomation.com/u/Matthew_Karee)\ **Post date:** [April 7, 2026, 1:32pm UTC](https://forum.inductiveautomation.com/t/issue-with-perspective-mobile-app-certificate-on-android/114918/2 "2026-04-07T13:32:34Z")
I’ve also tried using the hostname instead of the IP address on the page where you enter the gateway URL, but get the message “Host invalid” ---
**Author:** ![tgarrison](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/tgarrison/32/80965_2.png) [@tgarrison](https://forum.inductiveautomation.com/u/tgarrison)\ **Post date:** [April 7, 2026, 2:36pm UTC](https://forum.inductiveautomation.com/t/issue-with-perspective-mobile-app-certificate-on-android/114918/3 "2026-04-07T14:36:28Z")
I'm guessing your cert is using a hostname, so you have to use the hostname on the client. But it sounds like maybe your network isn't setup to resolve that hostname. ---
**Author:** ![Matthew\_Karee](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/matthew_karee/32/63956_2.png) [@Matthew\_Karee](https://forum.inductiveautomation.com/u/Matthew_Karee)\ **Post date:** [April 7, 2026, 2:43pm UTC](https://forum.inductiveautomation.com/t/issue-with-perspective-mobile-app-certificate-on-android/114918/4 "2026-04-07T14:43:43Z")
I am also unable to reach the gateway in a web browser on the tablet using the hostname ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [April 7, 2026, 5:06pm UTC](https://forum.inductiveautomation.com/t/issue-with-perspective-mobile-app-certificate-on-android/114918/5 "2026-04-07T17:06:20Z")
The default port for HTTPS on Ignition is **8043**. ---
**Author:** ![Matthew\_Karee](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/matthew_karee/32/63956_2.png) [@Matthew\_Karee](https://forum.inductiveautomation.com/u/Matthew_Karee)\ **Post date:** [April 7, 2026, 8:07pm UTC](https://forum.inductiveautomation.com/t/issue-with-perspective-mobile-app-certificate-on-android/114918/6 "2026-04-07T20:07:54Z")
I was able to connect to the Gateway through the Perspective app by creating another certificate in the Gateway with a Subject Alternative Name. I guess Android won’t let you install a certificate without the SAN. ---
**Author:** ![bensonh](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bensonh/32/6073_2.png) [@bensonh](https://forum.inductiveautomation.com/u/bensonh)\ **Post date:** [April 24, 2026, 8:10pm UTC](https://forum.inductiveautomation.com/t/issue-with-perspective-mobile-app-certificate-on-android/114918/7 "2026-04-24T20:10:55Z")
A bit late to the party here. But, yes. The trick is adding any additional SANs (Subject Alternative Names) to your groov EPIC or RIO's certificate. This can be done at web server certificate generation (in groov Manage with EPIC/RIO firmware 4.1.1 or later) or by using a Private CA to sign the EPIC/RIO's CSR (certificate signing request). The Private CA method is the one I use for 2 primary reasons: 1. The ability to add many SAN entries for IP addresses and DNS names during the cert signing process 2. Each client only needs one cert installed in their device trust stores (the Private CA's public cert) for all the groov devices signed by the same cert. Here's a helpful guide on this process, which includes information about creating a Private CA: [Getting a Trusted Connection Between a Web Browser and groov EPIC | Opto 22 Developer](https://developer.opto22.com/epicdev/browserssl/) Note that if the EPIC/RIOs certificate is changed or updated, our experience is that a restart of Ignition on the EPIC/RIO is required to pick up the new cert. -Benson