# OPC UA Server Faulted Certificate problem **URL:** \ **Category:** Ignition\ **Created:** [October 29, 2024, 3:59pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908 "2024-10-29T15:59:22Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Miguel\_Gomez](https://avatars.discourse-cdn.com/v4/letter/m/f0a364/32.png) [@Miguel\_Gomez](https://forum.inductiveautomation.com/u/Miguel_Gomez)\ **Post date:** [October 29, 2024, 3:59pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908/1 "2024-10-29T15:59:22Z")
Hello, currently having a problem with ignition edge 8.0.2. I did the steps in other forums (deleted both certificates, restarted, I change the opcuser password in both sides, OPC and Users). When I restart the gateway it is doesn't generate new certificates. I have an advice in OPC Connections " Ignition OPC UA Server this connection currently has no subscriptions, but we have a license. I noticed in modules there is a Enterprise Administration module faulted The log shows SocketIODelegate, UadcClientAssymetrc Handler UadClientAcknowlrdgeHandler Do you know what Else can I do? Thank you ![17302173935917404019276801626439](https://us1.discourse-cdn.com/inductiveautomation/original/3X/9/3/939b378f74505ca92ab8d17dd409e747650605f6.jpeg) ![1730217249256457780564655686137](https://us1.discourse-cdn.com/inductiveautomation/original/3X/b/7/b7dbcb614be2e8ef289bd447a7c649392e154e0e.jpeg) ![17302172782483941402882849147788](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/8/88da97569e55e279beb379be8662d6351b273f84.jpeg) ![17302172938564603829972055837939](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/5/35bfd6f9890f40b80206c3bfeda0a02e357aad4c.jpeg) ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [October 29, 2024, 4:04pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908/2 "2024-10-29T16:04:24Z")
Before anything else, I would upgrade to 8.0.17, to ensure all available bug fixes are applied. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [October 29, 2024, 4:05pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908/3 "2024-10-29T16:05:36Z")
Try this advice from the original topic you posted this in: [OPCUA certificate expired - #2 by Kevin.Herron](https://forum.inductiveautomation.com/t/opcua-certificate-expired/40663/2) > [@OPCUA certificate expired](https://forum.inductiveautomation.com/t/opcua-certificate-expired/40663/2): > > Stop the Ignition gateway then delete these files: > > - `$IGNITION_INSTALL/data/opcua/client/security/certificates.pfx` > - `$IGNITION_INSTALL/data/opcua/server/security/certificates.pfx` > > Start the Ignition gateway and your certificates should be valid and your default OPC UA connection should be working. ---
**Author:** ![Miguel\_Gomez](https://avatars.discourse-cdn.com/v4/letter/m/f0a364/32.png) [@Miguel\_Gomez](https://forum.inductiveautomation.com/u/Miguel_Gomez)\ **Post date:** [October 29, 2024, 4:07pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908/4 "2024-10-29T16:07:36Z")
Thank you, I already did it but when I restart the ignition gateway it is not generating new certificates ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [October 29, 2024, 4:08pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908/5 "2024-10-29T16:08:46Z")
Upload your logs here if you can, or give support a call. ---
**Author:** ![Miguel\_Gomez](https://avatars.discourse-cdn.com/v4/letter/m/f0a364/32.png) [@Miguel\_Gomez](https://forum.inductiveautomation.com/u/Miguel_Gomez)\ **Post date:** [October 29, 2024, 4:21pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908/6 "2024-10-29T16:21:48Z")
```python UascServerAsymmetricHandler 29Oct2024 09:21:15 [remote=/127.0.0.1:54276] Exception caught; sent ErrorMessage{error=StatusCode{name=Bad_CertificateTimeInvalid, value=0x80140000, quality=bad}, reason=certificate is expired: Thu Jun 27 00:00:00 PDT 2019 - Mon Jun 27 00:00:00 PDT 2022} io.netty.handler.codec.DecoderException: UaException: status=Bad_CertificateTimeInvalid, message=certificate is expired: Thu Jun 27 00:00:00 PDT 2019 - Mon Jun 27 00:00:00 PDT 2022 at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:472) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:278) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:345) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:337) at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1408) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:345) at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:930) at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:677) at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:612) at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:529) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:491) at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:905) at java.base/java.lang.Thread.run(Unknown Source) Caused by: org.eclipse.milo.opcua.stack.core.UaException: certificate is expired: Thu Jun 27 00:00:00 PDT 2019 - Mon Jun 27 00:00:00 PDT 2022 at org.eclipse.milo.opcua.stack.core.util.CertificateValidationUtil.validateCertificateValidity(CertificateValidationUtil.java:253) at org.eclipse.milo.opcua.stack.core.security.DefaultCertificateValidator.validate(DefaultCertificateValidator.java:34) at org.eclipse.milo.opcua.stack.server.transport.uasc.UascServerAsymmetricHandler.onOpenSecureChannel(UascServerAsymmetricHandler.java:200) at org.eclipse.milo.opcua.stack.server.transport.uasc.UascServerAsymmetricHandler.decode(UascServerAsymmetricHandler.java:124) at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:502) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:441) ... 15 common frames omitted ``` ---
**Author:** ![Miguel\_Gomez](https://avatars.discourse-cdn.com/v4/letter/m/f0a364/32.png) [@Miguel\_Gomez](https://forum.inductiveautomation.com/u/Miguel_Gomez)\ **Post date:** [October 29, 2024, 4:31pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908/7 "2024-10-29T16:31:13Z")
Going to try ---
**Author:** ![Miguel\_Gomez](https://avatars.discourse-cdn.com/v4/letter/m/f0a364/32.png) [@Miguel\_Gomez](https://forum.inductiveautomation.com/u/Miguel_Gomez)\ **Post date:** [October 29, 2024, 5:15pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-faulted-certificate-problem/97908/8 "2024-10-29T17:15:00Z")
Well, the problem was ignition is reading the certificate from another file, not the usual when it is installed. I deleted the certificates in that different path and it created new ones. Thank you for your time and experience.