# Problem with self-signed module

**URL:** <https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348>\
**Category:** Module Development\
**Created:** [November 10, 2016, 10:14pm UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348 "2016-11-10T22:14:50Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![idelamer](https://avatars.discourse-cdn.com/v4/letter/i/e5b9ba/32.png) [@idelamer](https://forum.inductiveautomation.com/u/idelamer)\
**Post date:** [November 10, 2016, 10:14pm UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/1 "2016-11-10T22:14:50Z")

</div>

I haven’t yet upgraded to Maven, but I’m updating a module from 7.7.x to run in a 7.8.1 system. I built it with Ant and updated the linked libraries.  
The module works fine in my developer-enabled server, but I can’t install it in the production server.

I created a self-signed certificate with KeyStore, just a simple key-pair, and exported the certificate chain.  
Signed it with the module signer.

But the installation throws a “signature not present” exception:

`com.inductiveautomation.ignition.gateway.modules.ModuleVerificationException: Module signature not present.
at com.inductiveautomation.ignition.gateway.modules.ModuleManagerImpl.verifyModuleSignatures(ModuleManagerImpl.java:1685)`

I unzipped the .modl and the signature is there…

I have tried a few approaches, like creating another key pair signed by the first one, so a 2-length certificate chain, but with the same result.

Any clues as to what the problem is? the signed module is attached…

Thanks,  
Ivan

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 10, 2016, 10:51pm UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/2 "2016-11-10T22:51:26Z")

</div>

I’m not sure the new module self-signing was introduced yet in 7.8.1… Have you tried installing it on a 7.8.4 gateway?

---

<div class="post-metadata">

**Author:** ![idelamer](https://avatars.discourse-cdn.com/v4/letter/i/e5b9ba/32.png) [@idelamer](https://forum.inductiveautomation.com/u/idelamer)\
**Post date:** [November 10, 2016, 10:52pm UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/3 "2016-11-10T22:52:52Z")

</div>

I don’t have that version and I should keep the same one as my customer is using for compatibility.

I also sometimes update drivers for 7.7.x installation in production.

Is the old module signing page still available somewhere? I was not able to find it

Thanks  
Ivan

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 10, 2016, 10:57pm UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/4 "2016-11-10T22:57:01Z")

</div>

It’s not…

---

<div class="post-metadata">

**Author:** ![idelamer](https://avatars.discourse-cdn.com/v4/letter/i/e5b9ba/32.png) [@idelamer](https://forum.inductiveautomation.com/u/idelamer)\
**Post date:** [November 10, 2016, 11:40pm UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/5 "2016-11-10T23:40:38Z")

</div>

So does this mean that self-signed modules won’t work in older versions of Ignition, and the old signer is not available?

What is the recommended course of action?

Thanks  
Ivan

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 11, 2016, 12:06am UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/6 "2016-11-11T00:06:49Z")

</div>

Correct, self-signed modules only work in the latest versions of 7.7, 7.8, 7.9. We can’t support the legacy signing any more.

I think there’s some process through which we can make a one time exception and manually sign a module you send us if you’re in a pinch here, but generally you’re expected to upgrade off 7.8.1 or whatever non-up-to-date version if you’re relying on custom developed or 3rd party modules.

It’s not the most graceful transition ever but we didn’t have any other options.

---

<div class="post-metadata">

**Author:** ![idelamer](https://avatars.discourse-cdn.com/v4/letter/i/e5b9ba/32.png) [@idelamer](https://forum.inductiveautomation.com/u/idelamer)\
**Post date:** [November 11, 2016, 3:07am UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/7 "2016-11-11T03:07:10Z")

</div>

There’s some servers that are installed at customer premises and they’d rather we don’t touch them. I’m afraid we might run into this issue again.

I’ll pass the information along.

Should I PM with the module that requires signing?

---

<div class="post-metadata">

**Author:** ![idelamer](https://avatars.discourse-cdn.com/v4/letter/i/e5b9ba/32.png) [@idelamer](https://forum.inductiveautomation.com/u/idelamer)\
**Post date:** [November 11, 2016, 3:14am UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/8 "2016-11-11T03:14:31Z")

</div>

It seems PMs don’t allow attachments. Can you email me at [delamer@inicotech.com](mailto:delamer@inicotech.com) or provide me with your address.

Many thanks  
Ivan

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [November 11, 2016, 12:59pm UTC](https://forum.inductiveautomation.com/t/problem-with-self-signed-module/12348/9 "2016-11-11T12:59:07Z")

</div>

Just for the record, the first versions of Ignition to accept the new signatures were v7.7.7 and v7.8.3.
