# OPC UA Certificate Issues - Opto-22 **URL:** \ **Category:** Ignition\ **Tags:** ignition81\ **Created:** [September 5, 2024, 5:09pm UTC](https://forum.inductiveautomation.com/t/opc-ua-certificate-issues-opto-22/95604 "2024-09-05T17:09:34Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![brownja667](https://avatars.discourse-cdn.com/v4/letter/b/a183cd/32.png) [@brownja667](https://forum.inductiveautomation.com/u/brownja667)\ **Post date:** [September 5, 2024, 5:09pm UTC](https://forum.inductiveautomation.com/t/opc-ua-certificate-issues-opto-22/95604/1 "2024-09-05T17:09:34Z")
I am having an issue securing our OPC UA connection between Ignition 8.1.32 and an Opto-22 device running 3.5.1. I have certificates trusted on the Ignition side and the Opto-22 side, but keep getting - **UaException: status=Bad\_SecurityChecksFailed, message=sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target** The connection is fine if I turn off certificate validation. From looking at the documentation, I believe this should just be a matter of trusting the certificates on both ends. The certificates appear on both devices as soon as a connection attempt is made. Both devices are running on the same subnet in the same facility. I have tried generating new certificates for both devices and restarting multiple times. Any suggestions would be appreciated. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [September 5, 2024, 5:12pm UTC](https://forum.inductiveautomation.com/t/opc-ua-certificate-issues-opto-22/95604/2 "2024-09-05T17:12:38Z")
Can you share the certificates you're working with? And the full log message? One thing this error might mean is there is a certificate chain involved rather than a self-signed certificate, so maybe there's a root that needs to be trusted. ---
**Author:** ![brownja667](https://avatars.discourse-cdn.com/v4/letter/b/a183cd/32.png) [@brownja667](https://forum.inductiveautomation.com/u/brownja667)\ **Post date:** [September 5, 2024, 5:21pm UTC](https://forum.inductiveautomation.com/t/opc-ua-certificate-issues-opto-22/95604/3 "2024-09-05T17:21:16Z")
I hope this is what you were asking for. Thank you for the response. I have done this before and never had this much trouble with it. [70a1caf24f10b57a6452f574c09668c89e7fd473 [C%3DUS].der](https://forum.inductiveautomation.com/uploads/short-url/7MLhzUtUnBvM4WqhtoB6KV4unyo.der) (1.1 KB) [ddb85f78aac3a310b4965ca1611fa6744ec145de [C%3DUS].der](https://forum.inductiveautomation.com/uploads/short-url/5e38czETcIFnrwfaYBZjYXL5ISg.der) (955 Bytes) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [September 5, 2024, 5:37pm UTC](https://forum.inductiveautomation.com/t/opc-ua-certificate-issues-opto-22/95604/4 "2024-09-05T17:37:26Z")
I think you're running into this issue: [OPC UA connection "unable to find valid certification path to requested target" - #9 by Kevin.Herron](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/9) For now, you'll have to just leave the certificate validation disabled. ---
**Author:** ![brownja667](https://avatars.discourse-cdn.com/v4/letter/b/a183cd/32.png) [@brownja667](https://forum.inductiveautomation.com/u/brownja667)\ **Post date:** [September 5, 2024, 5:49pm UTC](https://forum.inductiveautomation.com/t/opc-ua-certificate-issues-opto-22/95604/5 "2024-09-05T17:49:11Z")
Okay. I did see that in the forum, but frankly I was hoping it wasn't the problem. Like the other poster mentioned, it worked and then it stopped working which caused a lot of confusion. Any ETA on when that might be resolved? I'm asking because the customer will ask. Thanks again for the response. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [September 5, 2024, 5:55pm UTC](https://forum.inductiveautomation.com/t/opc-ua-certificate-issues-opto-22/95604/6 "2024-09-05T17:55:33Z")
I think it may be fixed in 8.1.43, which is available now.