# OPC connections working from gateway A but not from gateway B **URL:** \ **Category:** Ignition\ **Tags:** ignition81\ **Created:** [March 20, 2025, 12:44am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920 "2025-03-20T00:44:19Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Leor\_Fishman](https://avatars.discourse-cdn.com/v4/letter/l/e19adc/32.png) [@Leor\_Fishman](https://forum.inductiveautomation.com/u/Leor_Fishman)\ **Post date:** [March 20, 2025, 12:44am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/1 "2025-03-20T00:44:19Z")
I have an Ignition gateway A that's able to connect to a number of other Ignition OPC servers and Postgres databases. When I back up A and restore it to another machine B on the same network (using standard gwcmd to run the backup and restores), but with a different IP address, I can't connect to those servers or databases. Where should I start troubleshooting the connection failures? (I.e. where in the logs should I look, etc). Not expecting a full solution here, just a sense of where to start debugging. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 20, 2025, 12:45am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/2 "2025-03-20T00:45:32Z")
Certificates to be approved on both ends of OPC UA connections. Not part of backups, IIRC. ---
**Author:** ![Leor\_Fishman](https://avatars.discourse-cdn.com/v4/letter/l/e19adc/32.png) [@Leor\_Fishman](https://forum.inductiveautomation.com/u/Leor_Fishman)\ **Post date:** [March 20, 2025, 12:46am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/3 "2025-03-20T00:46:20Z")
dang, aight -- are the certs tied to FQDN, hostname, etc? Also how would I export/import them ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 20, 2025, 12:47am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/4 "2025-03-20T00:47:42Z")
Each gateway constructs a self-signed certificate for itself for OPC UA purposes. Look in the OPC security section. Also got to each of those servers to "trust" the new Ignition server. ---
**Author:** ![Leor\_Fishman](https://avatars.discourse-cdn.com/v4/letter/l/e19adc/32.png) [@Leor\_Fishman](https://forum.inductiveautomation.com/u/Leor_Fishman)\ **Post date:** [March 20, 2025, 12:49am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/5 "2025-03-20T00:49:09Z")
Thanks -- i don't suppose there's any way to use gwcmd to export the pkey/keychain and import it to gateway B? (I don't want to have to modify the keychains/trusted servers of the other systems) I know there's an exportks and similar command set in GWCMD ---
**Author:** ![Leor\_Fishman](https://avatars.discourse-cdn.com/v4/letter/l/e19adc/32.png) [@Leor\_Fishman](https://forum.inductiveautomation.com/u/Leor_Fishman)\ **Post date:** [March 20, 2025, 12:50am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/6 "2025-03-20T00:50:17Z")
Also, I'm assuming the DB connection issue is either also a cert or just some IP level firewalling? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 20, 2025, 1:04am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/7 "2025-03-20T01:04:43Z")
I'd start by looking at the faults in the Gateway, there should be error messages and stack traces. The certs are a good lead for the OPC UA connections, not as common for the DB connections. ---
**Author:** ![Leor\_Fishman](https://avatars.discourse-cdn.com/v4/letter/l/e19adc/32.png) [@Leor\_Fishman](https://forum.inductiveautomation.com/u/Leor_Fishman)\ **Post date:** [March 20, 2025, 1:09am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/8 "2025-03-20T01:09:26Z")
Great, in the logs of the gateway? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 20, 2025, 1:11am UTC](https://forum.inductiveautomation.com/t/opc-connections-working-from-gateway-a-but-not-from-gateway-b/103920/9 "2025-03-20T01:11:18Z")
The Gateway status pages for these connections should tell you about the faults and let you see a stack trace.