# Self signed SSL certs and designer in 8.3

**URL:** <https://forum.inductiveautomation.com/t/self-signed-ssl-certs-and-designer-in-8-3/111310>\
**Category:** Ignition\
**Tags:** ignition83\
**Created:** [October 9, 2025, 10:18am UTC](https://forum.inductiveautomation.com/t/self-signed-ssl-certs-and-designer-in-8-3/111310 "2025-10-09T10:18:21Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![hulla](https://avatars.discourse-cdn.com/v4/letter/h/49beb7/32.png) [@hulla](https://forum.inductiveautomation.com/u/hulla)\
**Post date:** [October 9, 2025, 10:18am UTC](https://forum.inductiveautomation.com/t/self-signed-ssl-certs-and-designer-in-8-3/111310/1 "2025-10-09T10:18:21Z")

</div>

Trust cert not working in designer.

I have checked:

> [@SSL Self-Signed Certificate Invalid](https://forum.inductiveautomation.com/t/ssl-self-signed-certificate-invalid/36668/5):
>
> Hi @sam1, @jcoleman, @weertske, when you generate your certificate, add your IP-Adress and DNS under Subject Alternative Names. As explained under point 6. in [How to Install a Self-Signed Certificate](https://www.docs.inductiveautomation.com/docs/8.1/platform/gateway/config/web-server-settings/secure-communication-ssl-tls#how-to-install-a-self-signed-certificate). Cheers

So I deleted my SelfSigned Cert, I had HTTPS redirect ON.

No I cannot login to my Gateway. The HTTP port works, but I cannot login. It does login, the login form succeeds, but there is no logged in user afterwards.

Now I am stuck.

I did

`./gwcmd.sh -i`  
`Gateway Name: Ignition-opcpod`  
`Gateway Version: 8.3.0 (64-bit)`  
`Web Server Status: RUNNING`  
`Gateway Status: RUNNING`  
`Http Port: 12088`  
`Https Port: 12043`

`./gwcmd.sh -p`  
`Password has been reset. Gateway needs to be restarted.`

`./gwcmd.sh -r`  
`Waiting for Gateway restart.`  
`Gateway needs to be commissioned`

I got at http port 12088 :  
**This site can’t provide a secure connection**

**10.246.30.91** sent an invalid response.

ERR\_SSL\_PROTOCOL\_ERROR

`./gwcmd.sh --clearks`  
`Error! java.lang.Exception: Unable to clear the SSL key store caused by java.lang.IllegalArgumentException: State is NO_CERTIFICATE`

 ![Screenshot From 2025-10-09 12-03-25](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/c/3ce9976288bb6713a37ea86c822f5271ef96c544.png)

 ![Screenshot From 2025-10-09 12-02-14](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/4/0488f65cedb33a401014310e54f6de9285ed35a1.png)

 ![Screenshot From 2025-10-09 12-02-26](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/b/3bfe202f3d367825399407148f4d3949ba5d3e40.png)

 ![Screenshot From 2025-10-09 12-02-33](https://us1.discourse-cdn.com/inductiveautomation/original/3X/e/a/ea4407728e9d863967e051a345ae31038d1535b0.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 9, 2025, 11:16am UTC](https://forum.inductiveautomation.com/t/self-signed-ssl-certs-and-designer-in-8-3/111310/2 "2025-10-09T11:16:30Z")

</div>

Edit `$IGNITION/data/gateway.xml` and disable `gateway.forceSecureRedirect`:

```xml
<entry key="gateway.forceSecureRedirect">false</entry>

```

then restart and try to access your Ignition Gateway. Make sure you include "http", not "https", in the URL you use.

---

<div class="post-metadata">

**Author:** ![hulla](https://avatars.discourse-cdn.com/v4/letter/h/49beb7/32.png) [@hulla](https://forum.inductiveautomation.com/u/hulla)\
**Post date:** [October 9, 2025, 11:34am UTC](https://forum.inductiveautomation.com/t/self-signed-ssl-certs-and-designer-in-8-3/111310/3 "2025-10-09T11:34:40Z")

</div>

Thanks, https in address bar was one error.

I changed the setting and did a restart. I do log in in GW Web and after log in, no user is logged in ☹

`cat data/gateway.xml`

```python
<properties>
<comment>Context Settings</comment>
<entry key="gateway.publicAddress.httpPort"></entry>
<entry key="gateway.publicAddress.autoDetect">true</entry>
<entry key="gateway.publicAddress.httpsPort"></entry>
<entry key="gateway.forceSecureRedirect">false</entry>
<entry key="gateway.metroSSLPort">12060</entry>
<entry key="gateway.includedCipherSuites">[]</entry>
<entry key="localdb.autobackup.delay">60</entry>
<entry key="context.startup.useautobackups">true</entry>
<entry key="gateway.sslport">12043</entry>
<entry key="gateway.maxKeepAliveRequests">200</entry>
<entry key="context.props.version">3</entry>
<entry key="gateway.port">12088</entry>
<entry key="gateway.useProxyForwardedHeader">false</entry>
<entry key="localdb.autobackup.count">5</entry>
<entry key="gateway.maxThreads">300</entry>
<entry key="gateway.connectionTimeout">60000</entry>
<entry key="localdb.faultbackup.count">3</entry>
<entry key="gateway.resolveHostNames">false</entry>
<entry key="gateway.acceptCount">100</entry>
<entry key="gateway.keepAliveTimeout">60000</entry>
<entry key="gateway.excludedCipherSuites">[]</entry>
<entry key="gateway.publicAddress.address"></entry>
</properties>

./gwcmd.sh -r
Waiting for Gateway restart.
Gateway is now running

```

---

<div class="post-metadata">

**Author:** ![hulla](https://avatars.discourse-cdn.com/v4/letter/h/49beb7/32.png) [@hulla](https://forum.inductiveautomation.com/u/hulla)\
**Post date:** [October 9, 2025, 11:39am UTC](https://forum.inductiveautomation.com/t/self-signed-ssl-certs-and-designer-in-8-3/111310/4 "2025-10-09T11:39:37Z")

</div>

I have a perspective project which requires login. Login screen appears, I login, same admin user. And a login screen comes up. I click Continue to login again, and login screen comes up. It seems a user is logged in, as login form no longer comes up, but it goes back to Continue to login as the login does not work.

---

<div class="post-metadata">

**Author:** ![hulla](https://avatars.discourse-cdn.com/v4/letter/h/49beb7/32.png) [@hulla](https://forum.inductiveautomation.com/u/hulla)\
**Post date:** [October 9, 2025, 2:13pm UTC](https://forum.inductiveautomation.com/t/self-signed-ssl-certs-and-designer-in-8-3/111310/5 "2025-10-09T14:13:31Z")

</div>

It looks like some Chrome security feature. I have another gateway on another port. I set seflsigned cert there. I did not Force Secure Redirect, which probable saves me posibility to use designer.

But I cannot login to gw via http, only via https. Which complains about security. And does not save my password.

---

<div class="post-metadata">

**Author:** ![hulla](https://avatars.discourse-cdn.com/v4/letter/h/49beb7/32.png) [@hulla](https://forum.inductiveautomation.com/u/hulla)\
**Post date:** [October 9, 2025, 2:19pm UTC](https://forum.inductiveautomation.com/t/self-signed-ssl-certs-and-designer-in-8-3/111310/6 "2025-10-09T14:19:26Z")

</div>

OK, i had to delete site data in chrome. Nice.