# Nothing changing in Gateway after Lets Encrypt cert install **URL:** \ **Category:** Ignition\ **Created:** [March 5, 2020, 10:33pm UTC](https://forum.inductiveautomation.com/t/nothing-changing-in-gateway-after-lets-encrypt-cert-install/32860 "2020-03-05T22:33:54Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![mleefers](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@mleefers](https://forum.inductiveautomation.com/u/mleefers)\ **Post date:** [March 5, 2020, 10:33pm UTC](https://forum.inductiveautomation.com/t/nothing-changing-in-gateway-after-lets-encrypt-cert-install/32860/1 "2020-03-05T22:33:54Z")
Hello All, I have recently installed a lets encrypt cert on my Ubuntu server running Ignition v8.0.7. It appears that everything worked find I got all of the cert files (private key and and fullchain) from certbot. I packaged it all up using pkcs12 and put it at /usr/local/bin/ignition/webserver/ssl.pfx . Then I used the ./gwcmd.sh --reloadks command and got the “Successfully reloaded the SSL key store” message however, I still cannot connect on 8043 and it doesn’t look like anything has changed in the webserver settings in the gateway (I still see the red message saying SSL is not configured). Is there a step that I am missing or do you have to already have SSL configured before you set it up this way? ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [March 5, 2020, 11:06pm UTC](https://forum.inductiveautomation.com/t/nothing-changing-in-gateway-after-lets-encrypt-cert-install/32860/2 "2020-03-05T23:06:09Z")
Are there any gateway log messages from the `gateway.SslManager` logger? ---
**Author:** ![mleefers](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@mleefers](https://forum.inductiveautomation.com/u/mleefers)\ **Post date:** [March 6, 2020, 12:47am UTC](https://forum.inductiveautomation.com/t/nothing-changing-in-gateway-after-lets-encrypt-cert-install/32860/3 "2020-03-06T00:47:36Z")
Hey yes there are a couple of warnings I will attach the logs. I see an “Unable to refresh state” from the SslManager and “Could not read license from HASP key. Driver not found” from licenseManager. [Ignition-ia-dist-002\_Ignition\_logs\_20200305-1844.idb](https://us1.discourse-cdn.com/inductiveautomation/original/2X/7/7e1b6d85bd29c52935923bc61ab8aba690773980.idb) (188 KB) ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [March 6, 2020, 1:03am UTC](https://forum.inductiveautomation.com/t/nothing-changing-in-gateway-after-lets-encrypt-cert-install/32860/4 "2020-03-06T01:03:44Z")
I see this: > java.nio.file.AccessDeniedException: webserver/ssl.pfx Ignition must not have permission to open the ssl.pfx keystore file. ---
**Author:** ![mleefers](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@mleefers](https://forum.inductiveautomation.com/u/mleefers)\ **Post date:** [March 6, 2020, 3:04pm UTC](https://forum.inductiveautomation.com/t/nothing-changing-in-gateway-after-lets-encrypt-cert-install/32860/5 "2020-03-06T15:04:50Z")
Thank you for the help. I was able to get that fixed and I am up and running with SSL now.👌 ---
**Author:** ![Pat\_Schmidt](https://avatars.discourse-cdn.com/v4/letter/p/0ea827/32.png) [@Pat\_Schmidt](https://forum.inductiveautomation.com/u/Pat_Schmidt)\ **Post date:** [March 31, 2021, 9:20pm UTC](https://forum.inductiveautomation.com/t/nothing-changing-in-gateway-after-lets-encrypt-cert-install/32860/6 "2021-03-31T21:20:09Z")
Would you be able to give some details on how this was resolved? I’m running into the same issue but not sure what permissions need to be changed. Thanks ---
**Author:** ![tom1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/tom1/32/21417_2.png) [@tom1](https://forum.inductiveautomation.com/u/tom1)\ **Post date:** [April 7, 2021, 8:07pm UTC](https://forum.inductiveautomation.com/t/nothing-changing-in-gateway-after-lets-encrypt-cert-install/32860/7 "2021-04-07T20:07:26Z")
@Pat_Schmidt, I too just ran into this. - My Ignition instance is running as my local user (this is set during install in `/usr/local/bin/ignition/ignition.sh`) however my certificate deploy script is running as root. This is where the permission issue comes from. - The key store file is consequently owned by root with only read access for that user. - In my deploy script, I added this line **before** the line that reloads the key store: - `chown $IGNITION_USER:$IGNITION_USER $IGNITION/webserver/ssl.pfx` - Note the new environment variable, `IGNITION_USER` that I added which is not in the tutorial referenced above. You can add this to your environment or replace it with the actual user / group name.