# Requirement of key size for code signing certificate to sign modules

**URL:** <https://forum.inductiveautomation.com/t/requirement-of-key-size-for-code-signing-certificate-to-sign-modules/106321>\
**Category:** Module Development\
**Created:** [May 16, 2025, 7:28am UTC](https://forum.inductiveautomation.com/t/requirement-of-key-size-for-code-signing-certificate-to-sign-modules/106321 "2025-05-16T07:28:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![manisha.bansal](https://avatars.discourse-cdn.com/v4/letter/m/f19dbf/32.png) [@manisha.bansal](https://forum.inductiveautomation.com/u/manisha.bansal)\
**Post date:** [May 16, 2025, 7:28am UTC](https://forum.inductiveautomation.com/t/requirement-of-key-size-for-code-signing-certificate-to-sign-modules/106321/1 "2025-05-16T07:28:32Z")

</div>

Can we get to know

1. What is the optimal key size for a code signing certificate (leaf)?
2. What is the requirement for key size for ROOT of this signing cert?
3. What are the requirements around using a self-signed cert?

---

<div class="post-metadata">

**Author:** ![David\_Stone](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/david_stone/32/79749_2.png) [@David\_Stone](https://forum.inductiveautomation.com/u/David_Stone)\
**Post date:** [May 16, 2025, 8:01am UTC](https://forum.inductiveautomation.com/t/requirement-of-key-size-for-code-signing-certificate-to-sign-modules/106321/2 "2025-05-16T08:01:09Z")

</div>

I have used 2048 size for a standard openssl generated certificate with the code signing usage added. AlI I did was generate the certificate, add it to a java keystore and use the code signing tool with these items.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [May 16, 2025, 2:29pm UTC](https://forum.inductiveautomation.com/t/requirement-of-key-size-for-code-signing-certificate-to-sign-modules/106321/3 "2025-05-16T14:29:12Z")

</div>

It doesn't really matter at all. Just self sign something.

> [@Code signing certificate SSL.com](https://forum.inductiveautomation.com/t/code-signing-certificate-ssl-com/105932/2):
>
> Module signing is pretty meaningless, there is no real advantage to using a publicly trusted certificate for signing Ignition modules. Just have your company generate a certificate from their CA or use a self-signed certificate.