# Perspective IOS App doesn't valid Certificate

**URL:** <https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [February 27, 2023, 5:04pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374 "2023-02-27T17:04:39Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![dferrie1](https://avatars.discourse-cdn.com/v4/letter/d/ad7895/32.png) [@dferrie1](https://forum.inductiveautomation.com/u/dferrie1)\
**Post date:** [February 27, 2023, 5:04pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374/1 "2023-02-27T17:04:39Z")

</div>

Hi,

We're trying to get the Perspective App working on an iPad. We use an internal Windows CA, and have successfully installed the profile and enabled the root ca in the Certificate of Trust.

When we add the gateway manually, the sprite just spins next to the gateway address. Is there anything else that needs to be installed for it to allow you to select the application?

 ![spinning](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/1/6103ef6c739d300fe1928b843342918b74489e5b.png)  
 ![trust](https://us1.discourse-cdn.com/inductiveautomation/original/3X/f/5/f51a460bdacc926eb8e2f9926e91965988f9bc14.png)

Thanks

---

<div class="post-metadata">

**Author:** ![dferrie1](https://avatars.discourse-cdn.com/v4/letter/d/ad7895/32.png) [@dferrie1](https://forum.inductiveautomation.com/u/dferrie1)\
**Post date:** [February 27, 2023, 5:06pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374/2 "2023-02-27T17:06:30Z")

</div>

We're on 8.1.22 and the latest iPad app.

There is also the following error in the perspective app logs: Alamofire.AFError.ServerTrustFailureReaon.noCertificatesFound

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [February 27, 2023, 6:02pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374/3 "2023-02-27T18:02:28Z")

</div>

Are you trying to add the gateway by IP address or by name? Certificates typically only contain a DNS name. A subject alternative name of the IP address can be included in certificates to permit access that way. Does that exist in the cert?

---

<div class="post-metadata">

**Author:** ![dferrie1](https://avatars.discourse-cdn.com/v4/letter/d/ad7895/32.png) [@dferrie1](https://forum.inductiveautomation.com/u/dferrie1)\
**Post date:** [February 27, 2023, 6:06pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374/4 "2023-02-27T18:06:14Z")

</div>

Thanks for the reply. By the FQDN, and the alternative does not exist.The FQDN matches the common name on the cert.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 27, 2023, 6:16pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374/5 "2023-02-27T18:16:50Z")

</div>

DNS name in the CN attribute is deprecated. I don't think Apple will consider a certificate trusted if it does not have an entry in the SAN field.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 27, 2023, 6:17pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374/6 "2023-02-27T18:17:28Z")

</div>

Heyo: [Requirements for trusted certificates in iOS 13 and macOS 10.15 - Apple Support](https://support.apple.com/en-us/HT210176)

> - TLS server certificates must present the DNS name of the server in the Subject Alternative Name extension of the certificate. DNS names in the CommonName of a certificate are no longer trusted.

---

<div class="post-metadata">

**Author:** ![dferrie1](https://avatars.discourse-cdn.com/v4/letter/d/ad7895/32.png) [@dferrie1](https://forum.inductiveautomation.com/u/dferrie1)\
**Post date:** [February 27, 2023, 6:28pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374/7 "2023-02-27T18:28:37Z")

</div>

Thanks so much!

---

<div class="post-metadata">

**Author:** ![jasoncgould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jasoncgould/32/29117_2.png) [@jasoncgould](https://forum.inductiveautomation.com/u/jasoncgould)\
**Post date:** [August 31, 2023, 6:24pm UTC](https://forum.inductiveautomation.com/t/perspective-ios-app-doesnt-valid-certificate/70374/8 "2023-08-31T18:24:06Z")

</div>

Hi Kevin,

Thanks for this solution as I was having the same issue. Could a documentation person update the general "[Security Certificates - Ignition User Manual 8.1 - Ignition Documentation](https://docs.inductiveautomation.com/display/DOC81/Security+Certificates)" page with this information?
