# SSL Cert Expiry **URL:** \ **Category:** Ignition\ **Created:** [October 4, 2021, 10:33pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597 "2021-10-04T22:33:19Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![dion.botha](https://avatars.discourse-cdn.com/v4/letter/d/46a35a/32.png) [@dion.botha](https://forum.inductiveautomation.com/u/dion.botha)\ **Post date:** [October 4, 2021, 10:33pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/1 "2021-10-04T22:33:19Z")
Hi Guys, Some time ago we setup SSL. I wanted to know, what could happen if the certs expire before we take action to renew? Could our Ignition clients lose communication to server? Is there any way I could setup an email notification reminder that triggers say a month before a cert expires? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [October 5, 2021, 11:51am UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/2 "2021-10-05T11:51:32Z")
> [@dion.botha](#): > > Could our Ignition clients lose communication to server? Yes. > [@dion.botha](#): > > an email notification reminder No, but you could put an entry in your own calendar.... ---
**Author:** ![dion.botha](https://avatars.discourse-cdn.com/v4/letter/d/46a35a/32.png) [@dion.botha](https://forum.inductiveautomation.com/u/dion.botha)\ **Post date:** [October 5, 2021, 7:35pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/3 "2021-10-05T19:35:44Z")
Thanks Phil! I know I can put an email in my own calendar but I try to take individuals out of the equation where possible (what happens when I leave the company!). As an example, I used to use ‘On\_Call Rosters’ in email notification pipeline blocks but then I had to constantly edit myself in the gateway when people wanted to edit members. I switched to using a calculated roster type that emails an outlook email contact group (managed by IT). Now I simply request new contact groups and forward member edit requests to IT. The Gateway → Web Server → Certificate Details has the information I want, it even has a warning on that screen if it is to expire ‘soon’. I think I will submit an idea to IA to perhaps have the ‘Not Valid After’ date as a system tag so we can do what we want with it. ---
**Author:** ![dion.botha](https://avatars.discourse-cdn.com/v4/letter/d/46a35a/32.png) [@dion.botha](https://forum.inductiveautomation.com/u/dion.botha)\ **Post date:** [October 5, 2021, 7:36pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/4 "2021-10-05T19:36:34Z")
> **[SSL Certificate Expiration Date as System Tag | Voters | Inductive Automation](https://inductiveautomation.canny.io/ignition-features-and-ideas/p/ssl-certificate-expiration-date-as-system-tag)** ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [October 5, 2021, 8:53pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/5 "2021-10-05T20:53:04Z")
The humor fell flat… /: ---
**Author:** ![Hitesh\_Rathod1](https://avatars.discourse-cdn.com/v4/letter/h/ea666f/32.png) [@Hitesh\_Rathod1](https://forum.inductiveautomation.com/u/Hitesh_Rathod1)\ **Post date:** [July 10, 2024, 7:01pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/6 "2024-07-10T19:01:28Z")
If I renew my SSL cert before It is going to expire by automate SSL process. Will that impact on clients which are running at shop floor? I just wanted to be sure once the certificate is renewd automatically, Shop floor clients will be impacted anyway? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [July 10, 2024, 8:02pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/7 "2024-07-10T20:02:32Z")
Depending on how old your version is, you may need to restart the gateway. At the very least, clients will need to renegotiate a secure connection, so some seconds of shop floor breakage is likely. Have you tested with a trial install? ---
**Author:** ![Hitesh\_Rathod1](https://avatars.discourse-cdn.com/v4/letter/h/ea666f/32.png) [@Hitesh\_Rathod1](https://forum.inductiveautomation.com/u/Hitesh_Rathod1)\ **Post date:** [July 10, 2024, 8:45pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/8 "2024-07-10T20:45:42Z")
We are using Ignition 8.1.16 Another concern is If clients are running at shop floor and meantime certificate renewed on the server, what will impact in client, process will be intrrupted? ---
**Author:** ![nicholas.robinson](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.robinson/32/22188_2.png) [@nicholas.robinson](https://forum.inductiveautomation.com/u/nicholas.robinson)\ **Post date:** [July 11, 2024, 6:58pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/9 "2024-07-11T18:58:02Z")
@dion.botha how many gateways are you managing? If its more than a handful, you should consider automating the cert renewal process that way you don't have to worry about it at all. Inside of that you can include checking of the installed certificate date. ---
**Author:** ![diamond](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@diamond](https://forum.inductiveautomation.com/u/diamond)\ **Post date:** [July 14, 2024, 3:03pm UTC](https://forum.inductiveautomation.com/t/ssl-cert-expiry/51597/10 "2024-07-14T15:03:32Z")
You can automate certificate renewal: > **[Let's Encrypt Guide for Ignition](https://inductiveautomation.com/resources/article/lets-encrypt-guide-for-ignition)** > > Ignition 8.0.3 introduces support for hot-reloading the Gateway’s SSL keystore. This capability enables Ignition to play well with services such as Let’s Encrypt which provide for automatic SSL certificate management. This article walks through one...