# Module Certificate - Self Signed not flagging **URL:** \ **Category:** Ignition 8.3 Early Access\ **Created:** [August 14, 2025, 5:15pm UTC](https://forum.inductiveautomation.com/t/module-certificate-self-signed-not-flagging/109780 "2025-08-14T17:15:24Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![David\_Stone](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/david_stone/32/79749_2.png) [@David\_Stone](https://forum.inductiveautomation.com/u/David_Stone)\ **Post date:** [August 14, 2025, 5:15pm UTC](https://forum.inductiveautomation.com/t/module-certificate-self-signed-not-flagging/109780/1 "2025-08-14T17:15:24Z")
I just installed a signed module that I wrote, I signed it with a self signed certificate. The dialog in the Ignition “Install module” section tells me that the certificate is signed by a trusted authority. While I appreciate the confidence in my trust levels, this isn’t correct. Is this just not implemented yet? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 14, 2025, 5:17pm UTC](https://forum.inductiveautomation.com/t/module-certificate-self-signed-not-flagging/109780/2 "2025-08-14T17:17:00Z")
It’s probably just implemented incorrectly, like the vendor/author name stuff. If you can add some screenshots for context that will help with the bug report. ---
**Author:** ![David\_Stone](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/david_stone/32/79749_2.png) [@David\_Stone](https://forum.inductiveautomation.com/u/David_Stone)\ **Post date:** [August 14, 2025, 5:23pm UTC](https://forum.inductiveautomation.com/t/module-certificate-self-signed-not-flagging/109780/3 "2025-08-14T17:23:10Z")
![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/c/d/cd9deb28aa98479594de196bbe86f3c0bca8726c.png) Steps to reproduce: install a self signed module, look at the install window, or look at the license in the module list. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 14, 2025, 5:36pm UTC](https://forum.inductiveautomation.com/t/module-certificate-self-signed-not-flagging/109780/4 "2025-08-14T17:36:54Z")
I’m not really of the opinion that this specifically is broken because the alternative is that you have to buy a code signing cert from a public CA, and that’s not something I really believe should be a requirement either. What’s really broken is our half-hearted implementation of module signing. The way it _should_ work is there’s an area of the gateway where you can install trusted module signing certs or CAs, probably pre-seeded with IA, Sepasoft, and Cirrus Link certs, and then only modules signed by certs in this area are allowed to load unless unsigned modules are allowed by the corresponding system property. ---
**Author:** ![David\_Stone](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/david_stone/32/79749_2.png) [@David\_Stone](https://forum.inductiveautomation.com/u/David_Stone)\ **Post date:** [August 14, 2025, 5:38pm UTC](https://forum.inductiveautomation.com/t/module-certificate-self-signed-not-flagging/109780/5 "2025-08-14T17:38:22Z")
It's only broken because its in no way a trusted cert. If it is a trusted cert, show the banner, cool. If it is not, don't show a banner saying that it is? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 14, 2025, 5:39pm UTC](https://forum.inductiveautomation.com/t/module-certificate-self-signed-not-flagging/109780/6 "2025-08-14T17:39:30Z")
Yeah the messaging should probably change a bit, at least before you’ve installed the module. Once you’ve installed it you’ve implicitly, if not explicitly, trusted that signing certificate.