# Lets Encrypt SSL

**URL:** <https://forum.inductiveautomation.com/t/lets-encrypt-ssl/36373>\
**Category:** Ignition\
**Created:** [July 6, 2020, 2:06am UTC](https://forum.inductiveautomation.com/t/lets-encrypt-ssl/36373 "2020-07-06T02:06:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lane.duncan](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/lane.duncan/32/83700_2.png) [@lane.duncan](https://forum.inductiveautomation.com/u/lane.duncan)\
**Post date:** [July 6, 2020, 2:06am UTC](https://forum.inductiveautomation.com/t/lets-encrypt-ssl/36373/1 "2020-07-06T02:06:49Z")

</div>

First lets be very clear: I know very little about Linux, and I am working with a headless Ubuntu 18 server on an AWS lightsail instance.

I was able to get the certificates using this guide:

> **[How To Use Certbot Standalone Mode to Retrieve Let's Encrypt SSL Certificates...](https://www.digitalocean.com/community/tutorials/how-to-use-certbot-standalone-mode-to-retrieve-let-s-encrypt-ssl-certificates-on-ubuntu-1804)**
>
> Certbot offers a variety of ways to validate your domain, fetch certificates, and automatically configure Apache and Nginx. In this tutorial, we'll discuss Certbot's standalone mode and how to use it to secure other types of services, such as a mail...

Now I am on to the guide found on the Ignition website:

> **[Let's Encrypt Guide for Ignition](https://www.inductiveautomation.com/resources/article/lets-encrypt-guide-for-ignition#creating-the-key-store)**
>
> Ignition 8.0.3 introduces support for hot-reloading the Gateway’s SSL keystore. This capability enables Ignition to play well with services such as Let’s Encrypt which provide for automatic SSL certificate management. This article walks through one...

Specifically I am on this step to create the certificate bundle:

```auto
cat $CERT_CHAIN $ROOT_CA_CERT > $CERT_BUNDLE

```

---

<div class="post-metadata">

**Author:** ![lane.duncan](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/lane.duncan/32/83700_2.png) [@lane.duncan](https://forum.inductiveautomation.com/u/lane.duncan)\
**Post date:** [July 6, 2020, 8:21am UTC](https://forum.inductiveautomation.com/t/lets-encrypt-ssl/36373/3 "2020-07-06T08:21:37Z")

</div>

never mind. I now understand the using of sudo better, copying files to temp directories, and changing permissions.