# OPC UA connection "unable to find valid certification path to requested target"

**URL:** <https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006>\
**Category:** Ignition\
**Tags:** ignition80\
**Created:** [October 15, 2021, 6:28pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006 "2021-10-15T18:28:58Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![user20](https://avatars.discourse-cdn.com/v4/letter/u/a587f6/32.png) [@user20](https://forum.inductiveautomation.com/u/user20)\
**Post date:** [October 15, 2021, 6:28pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/1 "2021-10-15T18:28:58Z")

</div>

Hi Kevin ,

I am having similar issue but in my case , I have ignition edge and ignition gateway installed in the same server with two different ports. Ignition edge is running fine and in ignition gate way i am getting this certs issue . Can you please help

Note: I am trying to communicate with the device configured in AWS IOT greengrass Linux machine and ignition server and Greengrass server are accessible .

UaException: status=Bad\_SecurityChecksFailed, message=sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target  
at org.eclipse.milo.opcua.stack.client.transport.uasc.UascClientAcknowledgeHandler.onError(UascClientAcknowledgeHandler.java:258)  
at org.eclipse.milo.opcua.stack.client.transport.uasc.UascClientAcknowledgeHandler.decode(UascClientAcknowledgeHandler.java:167)  
at io.netty.handler.codec.ByteToMessageCodec$1.decode(ByteToMessageCodec.java:42)  
at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:498)  
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:437)  
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276)  
at io.netty.handler.codec.ByteToMessageCodec.channelRead(ByteToMessageCodec.java:103)  
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:377)  
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:363)  
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:355)  
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410)  
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:377)  
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:363)  
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919)  
at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163)  
at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714)  
at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:650)  
at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:576)  
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493)  
at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989)  
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)  
at java.base/java.lang.Thread.run(Unknown Source)

8.0.15 (b2020072213)  
Azul Systems, Inc. 11.0.6

Thanks

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 15, 2021, 6:33pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/2 "2021-10-15T18:33:01Z")

</div>

It looks like you haven’t mutually trusted the certificates on both sides of the OPC UA connection this is coming from.

---

<div class="post-metadata">

**Author:** ![user20](https://avatars.discourse-cdn.com/v4/letter/u/a587f6/32.png) [@user20](https://forum.inductiveautomation.com/u/user20)\
**Post date:** [October 15, 2021, 6:36pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/3 "2021-10-15T18:36:45Z")

</div>

Thank you for the prompt reply!

Mutual trust between edge and gateway opc UA server ? May I know how to do that mutual trust if my understanding is right please  
Thanks

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 15, 2021, 6:38pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/4 "2021-10-15T18:38:52Z")

</div>

In the Ignition Gateway config section under OPC UA \> Security there are tabs for Client and Server.

On gateway this connection originates from look under the Client tab and make sure there is no quarantined server certificate. If there is, trust it.

If the server you are connecting to is the one from another Ignition Gateway, go to that gateway and do the same thing, but look under the Server tab instead.

If the server is another piece of software that isn’t Ignition you’ll have to consult its documentation.

---

<div class="post-metadata">

**Author:** ![user20](https://avatars.discourse-cdn.com/v4/letter/u/a587f6/32.png) [@user20](https://forum.inductiveautomation.com/u/user20)\
**Post date:** [October 18, 2021, 2:45pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/5 "2021-10-18T14:45:51Z")

</div>

Hey Kevin,

Thank you , after I trusted in the gateway under client I do not see any fault issue and Cert issue . But we are not seeing any error in the logs also .

PS: We are trying to connect through MQTT transmission to AWS greengrass EC2 using port 8883 . Here the server is giving 0 of 1 connectivity and it is working with IOT core connectivity directly.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 18, 2021, 2:49pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/6 "2021-10-18T14:49:36Z")

</div>

> [@user20](#):
>
> PS: We are trying to connect through MQTT transmission to AWS greengrass EC2 using port 8883 . Here the server is giving 0 of 1 connectivity and it is working with IOT core connectivity directly.

I'm not sure what this has to do with OPC UA.

Did you get the OPC UA connection connected? Is this a separate issue?

---

<div class="post-metadata">

**Author:** ![user20](https://avatars.discourse-cdn.com/v4/letter/u/a587f6/32.png) [@user20](https://forum.inductiveautomation.com/u/user20)\
**Post date:** [October 18, 2021, 2:56pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/7 "2021-10-18T14:56:54Z")

</div>

I am sorry , ignore my previous comment. Actually after the we trusted the client certificate it is working fine. Thank you for your help

---

<div class="post-metadata">

**Author:** ![alex.narvais](https://avatars.discourse-cdn.com/v4/letter/a/50afbb/32.png) [@alex.narvais](https://forum.inductiveautomation.com/u/alex.narvais)\
**Post date:** [July 26, 2024, 10:35pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/8 "2024-07-26T22:35:38Z")

</div>

@Kevin.Herron I'm having the same issue with getting Ignition to connect to the Codesys OPCUA Server running on my GROOV RIO, it was working up until 3 days ago. I haven't updated any firmware or ignition versions either. I'm running Ignition 8.1.41.

In the Ignition Gateway under the Client Tab I trusted the certificate and then it continuously reappears under Quarantined Certificates, please see the image below:

 ![Ignition Gateway Client Security](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/5/15c9afa054cb86ceef0fa2bd6dc896019f0ad700.png)

On the CODESYS side I have also trusted the Ignition Client Certificate to start the connection process, please see the image below:

 ![CODESYS Security Screen](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/2/124a9875dd7cea934e4c1d82f89fc97d8ea27e18.png)

The only way I can establish a connection from Ignition is when I set the option

> Security Certificate Validation Enabled = False

I have attached both my certificates if you want to take a look I have all the required Key Usage requirement for both and even regenerated both certificates on each side just eliminate any bad certificates.  
[codesys\_grv\_rio.der](https://forum.inductiveautomation.com/uploads/short-url/Qt5K64uXsdje5JnDGcuA07bbfR.der) (856 Bytes)  
[ignition\_client.der](https://forum.inductiveautomation.com/uploads/short-url/mSSfdD7MPpciDNwiCbOCESZPoay.der) (1.1 KB)

Here is the exact error from ignition:

```python
UaException: status=Bad_SecurityChecksFailed, message=sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at org.eclipse.milo.opcua.stack.core.util.validation.CertificateValidationUtil.buildCertPath(CertificateValidationUtil.java:400)
	at org.eclipse.milo.opcua.stack.core.util.validation.CertificateValidationUtil.buildTrustedCertPath(CertificateValidationUtil.java:120)
	at org.eclipse.milo.opcua.stack.client.security.DefaultClientCertificateValidator.validateCertificateChain(DefaultClientCertificateValidator.java:64)
	at org.eclipse.milo.opcua.stack.client.transport.uasc.UascClientMessageHandler.onOpenSecureChannel(UascClientMessageHandler.java:469)
	at org.eclipse.milo.opcua.stack.client.transport.uasc.UascClientMessageHandler.decodeMessage(UascClientMessageHandler.java:394)
	at org.eclipse.milo.opcua.stack.client.transport.uasc.UascClientMessageHandler.decode(UascClientMessageHandler.java:382)
	at io.netty.handler.codec.ByteToMessageCodec$1.decode(ByteToMessageCodec.java:42)
	at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:529)
	at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468)
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290)
	at io.netty.handler.codec.ByteToMessageCodec.channelRead(ByteToMessageCodec.java:103)
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442)
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420)
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412)
	at org.eclipse.milo.opcua.stack.client.transport.uasc.UascClientAcknowledgeHandler.decode(UascClientAcknowledgeHandler.java:171)
	at io.netty.handler.codec.ByteToMessageCodec$1.decode(ByteToMessageCodec.java:42)
	at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:529)
	at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468)
	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290)
	at io.netty.handler.codec.ByteToMessageCodec.channelRead(ByteToMessageCodec.java:103)
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:442)
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420)
	at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412)
	at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410)
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440)
	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420)
	at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919)
	at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166)
	at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788)
	at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:724)
	at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:650)
	at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562)
	at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997)
	at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
	at java.base/java.lang.Thread.run(Unknown Source)
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)
	at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
	at java.base/java.security.cert.CertPathBuilder.build(Unknown Source)
	at org.eclipse.milo.opcua.stack.core.util.validation.CertificateValidationUtil.buildCertPath(CertificateValidationUtil.java:398)
	... 34 more

8.1.41 (b2024052809)
Azul Systems, Inc. 17.0.10

```

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 26, 2024, 11:49pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/9 "2024-07-26T23:49:21Z")

</div>

It looks like this certificate is being generated by software written against a more recent version of the OPC UA spec, which now definitively states that for a self-signed certificate the `cA` bit of the `BasicConstraints` extension _shall_ be set to `false`, with `true` being accepted for backwards compatibility as long as the pathLength constraint is 0.

Unfortunately Ignition is still looking for the `cA` bit to be true instead. We'll have to update this validation in a future version.

However, under these new rules, all self-signed certificates must have the `keyCertSign` KeyUsage bit set, so even if we were up to date on the validation rules it would still fail.

For now you'll just have to leave the validation disabled.

---

<div class="post-metadata">

**Author:** ![alex.narvais](https://avatars.discourse-cdn.com/v4/letter/a/50afbb/32.png) [@alex.narvais](https://forum.inductiveautomation.com/u/alex.narvais)\
**Post date:** [July 29, 2024, 4:23am UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/10 "2024-07-29T04:23:53Z")

</div>

@Kevin.Herron If thats true then why was I able to even establish a connection from the beginning and then out of nowhere is just stopped working?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 29, 2024, 4:42am UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/11 "2024-07-29T04:42:52Z")

</div>

I don’t know, can’t tell you that retroactively. Working with what I have.

---

<div class="post-metadata">

**Author:** ![Marcus\_Wilkinson1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/marcus_wilkinson1/32/65342_2.png) [@Marcus\_Wilkinson1](https://forum.inductiveautomation.com/u/Marcus_Wilkinson1)\
**Post date:** [October 22, 2024, 11:41am UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/12 "2024-10-22T11:41:44Z")

</div>

I am having the same problem. I have 2 Siemens PLCs both set up identical (apart from IP addresses and program) but the OPC settings are identical. I have the certificates downloaded from the TIA and installed on the Ignition machine and been through the endpoint setup both certificates are trusted but one of the connections connects ok and the other is faulting with:

_[remote=/10.69.67.56:4840] Exception caught: UaException: status=Bad\_SecurityChecksFailed, message=sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target_

I have tried deleting all the connections and certificates and restarting the ignition and reinstalling but always the same one connects however checking on the siemens they are both set up exactly the same too

---

<div class="post-metadata">

**Author:** ![Marcus\_Wilkinson1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/marcus_wilkinson1/32/65342_2.png) [@Marcus\_Wilkinson1](https://forum.inductiveautomation.com/u/Marcus_Wilkinson1)\
**Post date:** [October 22, 2024, 1:04pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/13 "2024-10-22T13:04:46Z")

</div>

in addition to this i have just used the Matrikon OPCUA explorere from the same server as the ignition and getting a good connection from there on both siemens OPC.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 22, 2024, 1:08pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/14 "2024-10-22T13:08:01Z")

</div>

Can you share your logs and the server certificate(s)?

---

<div class="post-metadata">

**Author:** ![Marcus\_Wilkinson1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/marcus_wilkinson1/32/65342_2.png) [@Marcus\_Wilkinson1](https://forum.inductiveautomation.com/u/Marcus_Wilkinson1)\
**Post date:** [October 22, 2024, 1:24pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/15 "2024-10-22T13:24:16Z")

</div>

[PLC-K20Communication-1.cer](https://forum.inductiveautomation.com/uploads/short-url/zZ6LNtWMitPdEXJ6WeOjvsX0FjH.cer) (597 Bytes)  
[PLC-K20Communication-BAS.cer](https://forum.inductiveautomation.com/uploads/short-url/7l9OAElYwqlE30EAa3xh3MXeKU9.cer) (597 Bytes)  
The PLC-K20Communication-1.cer is the certificate that works

---

<div class="post-metadata">

**Author:** ![Marcus\_Wilkinson1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/marcus_wilkinson1/32/65342_2.png) [@Marcus\_Wilkinson1](https://forum.inductiveautomation.com/u/Marcus_Wilkinson1)\
**Post date:** [October 22, 2024, 1:26pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/16 "2024-10-22T13:26:15Z")

</div>

the logs are too large to uplo

 ![Screenshot 2024-10-22 142514](https://us1.discourse-cdn.com/inductiveautomation/original/3X/d/7/d7493a75756707c0fa53f5e145078e1f11b350bf.jpeg)  
ad onto here but attached is a screenshot

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 22, 2024, 1:28pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/17 "2024-10-22T13:28:19Z")

</div>

Can you click that + button and get the full stack trace?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 22, 2024, 1:32pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/18 "2024-10-22T13:32:06Z")

</div>

I'm honestly surprised either of these work. Are you sure you don't have certificate validation disabled for one of these connections? Or the connection configured without security?

Both of these certificates are using EC keys instead of RSA, which both shouldn't work and isn't allowed for use with the RSA-based OPC UA Security Policies.

---

<div class="post-metadata">

**Author:** ![Marcus\_Wilkinson1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/marcus_wilkinson1/32/65342_2.png) [@Marcus\_Wilkinson1](https://forum.inductiveautomation.com/u/Marcus_Wilkinson1)\
**Post date:** [October 22, 2024, 1:42pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/19 "2024-10-22T13:42:46Z")

</div>

![Screenshot 2024-10-22 144159](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/f/af2bcaefae44a7a0eac0a1bdcfecdf0cf42376f3.jpeg)

---

<div class="post-metadata">

**Author:** ![Marcus\_Wilkinson1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/marcus_wilkinson1/32/65342_2.png) [@Marcus\_Wilkinson1](https://forum.inductiveautomation.com/u/Marcus_Wilkinson1)\
**Post date:** [October 22, 2024, 1:47pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006/20 "2024-10-22T13:47:50Z")

</div>

![Screenshot 2024-10-22 144409](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/9/895b2c223549be53a28477c8ab51e6fa2c6366e7.jpeg)  
 ![Screenshot 2024-10-22 144516](https://us1.discourse-cdn.com/inductiveautomation/original/3X/2/d/2d59bd7d5a18a1f22ff47cabc0498585f606f49b.jpeg)  
these are the settings for the one that is connected and working fine. the faulting connection is identical except for the IP address.

[Next page](https://forum.inductiveautomation.com/t/opc-ua-connection-unable-to-find-valid-certification-path-to-requested-target/52006.md?page=2)