# IU Definition of self signed SSL certificate?

**URL:** <https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471>\
**Category:** General Discussion\
**Tags:** ignition79\
**Created:** [October 7, 2020, 7:48pm UTC](https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471 "2020-10-07T19:48:03Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![peter](https://avatars.discourse-cdn.com/v4/letter/p/278dde/32.png) [@peter](https://forum.inductiveautomation.com/u/peter)\
**Post date:** [October 7, 2020, 7:48pm UTC](https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471/1 "2020-10-07T19:48:03Z")

</div>

I'm doing the IU for 7.9 and I encountered this question:

> Ignition will generate a Genuine SSL Certificate when SSL is enabled.

The "correct" answer is false. However I'd argue that the correct answer is true. A self signed certificate _is_ a valid SSL certificate, but it is only lacking being signed by some external (trusted) CA. It still provides for HTTPS functionality.

Note however that I am not suggesting that a self signed cert provides the same _level_ of security as a CS signed cert, or ensures that the resource you are connecting to is the resource you expect to be connecting to.

Can someone disavow me of my belief?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 7, 2020, 8:01pm UTC](https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471/2 "2020-10-07T20:01:49Z")

</div>

I’m not aware of “genuine” having any standardized meaning for SSL certificates, so I’m inclined to agree with you, and I think the question should be re-worded to better suggest the certificate is one signed by a CA recognized by the CA/Browser Forum or something like that, i.e. a certificate that would be recognized and trusted by any browser.

(at which point the correct answer would be “false”)

---

<div class="post-metadata">

**Author:** ![peter](https://avatars.discourse-cdn.com/v4/letter/p/278dde/32.png) [@peter](https://forum.inductiveautomation.com/u/peter)\
**Post date:** [October 7, 2020, 8:07pm UTC](https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471/3 "2020-10-07T20:07:14Z")

</div>

I agree that the wording of the question is suspect. I think it would be better replaced with something like:

> When SSL is selected, Ignition will create a self signed certificate by default

To me this is more in the spirit of what you should be taking away when studying security.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 7, 2020, 8:09pm UTC](https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471/4 "2020-10-07T20:09:46Z")

</div>

I made someone in the training department aware of this thread, perhaps we’ll see a change to this question in the future.

---

<div class="post-metadata">

**Author:** ![peter](https://avatars.discourse-cdn.com/v4/letter/p/278dde/32.png) [@peter](https://forum.inductiveautomation.com/u/peter)\
**Post date:** [October 7, 2020, 8:17pm UTC](https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471/5 "2020-10-07T20:17:36Z")

</div>

I’ll set a reminder to look in a year or two … lol

Just kidding. I think that the training department is doing a fantastic job. And I’m always blown away by the quality of the videos etc.

---

<div class="post-metadata">

**Author:** ![Paul.Scott](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul.scott/32/4578_2.png) [@Paul.Scott](https://forum.inductiveautomation.com/u/Paul.Scott)\
**Post date:** [October 7, 2020, 9:20pm UTC](https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471/6 "2020-10-07T21:20:13Z")

</div>

> [@peter](#):
>
> I’ll set a reminder to look in a year or two … lol

Jokes on you. I already updated the question 😄

Silliness aside, thanks for letting us know! We appreciate the input.

---

<div class="post-metadata">

**Author:** ![peter](https://avatars.discourse-cdn.com/v4/letter/p/278dde/32.png) [@peter](https://forum.inductiveautomation.com/u/peter)\
**Post date:** [October 8, 2020, 12:51am UTC](https://forum.inductiveautomation.com/t/iu-definition-of-self-signed-ssl-certificate/39471/7 "2020-10-08T00:51:54Z")

</div>

Damn you responsive, customer focused company … you keep pulling this sort of shenanigans and I’ll have to … have to … recommend you again 🤣
