# Setup SSL - Install Certificate help

**URL:** <https://forum.inductiveautomation.com/t/setup-ssl-install-certificate-help/85548>\
**Category:** Ignition\
**Created:** [February 12, 2024, 9:53am UTC](https://forum.inductiveautomation.com/t/setup-ssl-install-certificate-help/85548 "2024-02-12T09:53:08Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shivam\_Mathur](https://avatars.discourse-cdn.com/v4/letter/s/f6c823/32.png) [@Shivam\_Mathur](https://forum.inductiveautomation.com/u/Shivam_Mathur)\
**Post date:** [February 12, 2024, 9:53am UTC](https://forum.inductiveautomation.com/t/setup-ssl-install-certificate-help/85548/1 "2024-02-12T09:53:08Z")

</div>

Hello,

I am trying to setup SSL (https) on the ignition gateway server, following these instructions: [Secure Communication (SSL / TLS) - Ignition User Manual 8.1 - Ignition Documentation](https://docs.inductiveautomation.com/pages/viewpage.action?pageId=58611186#SecureCommunication(SSL/TLS)-InstallSecurityCertificates)

The file I received from "Issuer: Let's Encrypt" contains:

```auto
Certificate: (CRT)
-----BEGIN CERTIFICATE-----
content....
-----END CERTIFICATE-----

```

```auto
Private Key (KEY)
-----BEGIN RSA PRIVATE KEY-----
content....
-----END RSA PRIVATE KEY-----

```

```auto
Certificate Authority Bundle: (CABUNDLE)
-----BEGIN CERTIFICATE-----
content....
-----END CERTIFICATE-----

```

The setup on ignition gateway requires following:

```auto
- Private Key
- Certificate Signed By A Certificate Authority (CA)
- Any Intermediate CA Certificates (Provided by your CA)
- Root CA Certificate (Provided by your CA)

```

What is the mapping here? thanks

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [February 12, 2024, 1:17pm UTC](https://forum.inductiveautomation.com/t/setup-ssl-install-certificate-help/85548/2 "2024-02-12T13:17:46Z")

</div>

A CA Bundle isn't just one certificate. Take a closer look. It will be a chain of multiple certs, including the final Certificate Authority. Split it up.

---

<div class="post-metadata">

**Author:** ![Shivam\_Mathur](https://avatars.discourse-cdn.com/v4/letter/s/f6c823/32.png) [@Shivam\_Mathur](https://forum.inductiveautomation.com/u/Shivam_Mathur)\
**Post date:** [February 12, 2024, 1:26pm UTC](https://forum.inductiveautomation.com/t/setup-ssl-install-certificate-help/85548/3 "2024-02-12T13:26:02Z")

</div>

I took another look.

```auto
Certificate Authority Bundle: (CABUNDLE)
-----BEGIN CERTIFICATE-----
content....
-----END CERTIFICATE-----

```

Content inside looks like a single string to me. How do I split it up?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [February 12, 2024, 1:27pm UTC](https://forum.inductiveautomation.com/t/setup-ssl-install-certificate-help/85548/4 "2024-02-12T13:27:56Z")

</div>

I would use OpenSSL command line tools. (I always have to open the man pages when I use them, sorry.)