# SSL certificate expiry **URL:** \ **Category:** Ignition\ **Tags:** ignition81\ **Created:** [March 12, 2025, 7:30am UTC](https://forum.inductiveautomation.com/t/ssl-certificate-expiry/103560 "2025-03-12T07:30:42Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![aryavani.m](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@aryavani.m](https://forum.inductiveautomation.com/u/aryavani.m)\ **Post date:** [March 12, 2025, 7:30am UTC](https://forum.inductiveautomation.com/t/ssl-certificate-expiry/103560/1 "2025-03-12T07:30:42Z")
Hi Team, My ignition SSL certificate is going to expire by next month. i want to know what all the steps that needs to be followed once the new certificate is generated. How to generate the new certificate? Do i need to upload again in gateway? if yes where i need to upload. Also when i am changing the new certificates will it affect the data flow? we are using MQTT & in-built drivers for data transmission. Does it require any restart of ignition server? since i am doing this for first time i need some guidance. Thanks in advance. ---
**Author:** ![Chris\_Bingham](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@Chris\_Bingham](https://forum.inductiveautomation.com/u/Chris_Bingham)\ **Post date:** [March 12, 2025, 12:30pm UTC](https://forum.inductiveautomation.com/t/ssl-certificate-expiry/103560/2 "2025-03-12T12:30:08Z")
Assuming HTTPS cert, here’s a good starting point: > **[Secure Communication (SSL/TLS) | Ignition User Manual](https://www.docs.inductiveautomation.com/docs/8.1/platform/gateway/config/web-server-settings/secure-communication-ssl-tls)** > > Inductive Automation recommends enforcing secure communication in Ignition using digital certificates. The Ignition Gateway web server can provide modern end-to-end security using Transport Level Security (TLS) technologies. This protects... A new HTTPS cert can be updated live, with no impact to production. You do not need to wait until the old cert expires. As soon as you have a new one (either purchased from a Certificate Authority, or a self-signed), you can import it. ---
**Author:** ![aryavani.m](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@aryavani.m](https://forum.inductiveautomation.com/u/aryavani.m)\ **Post date:** [March 13, 2025, 9:45am UTC](https://forum.inductiveautomation.com/t/ssl-certificate-expiry/103560/3 "2025-03-13T09:45:15Z")
Thanks for your response. will it affect the MQTT connections during the renewal? Also, i have redundant servers. so, SSL needs to be renewed separately in both master and backup servers, right? ---
**Author:** ![Rick\_de\_Man](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/rick_de_man/32/75670_2.png) [@Rick\_de\_Man](https://forum.inductiveautomation.com/u/Rick_de_Man)\ **Post date:** [March 13, 2025, 2:35pm UTC](https://forum.inductiveautomation.com/t/ssl-certificate-expiry/103560/4 "2025-03-13T14:35:43Z")
The certificates needs to be updates on each server. Updating on each server has no complications as long as the old certificate has not expired. ---
**Author:** ![Chris\_Bingham](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@Chris\_Bingham](https://forum.inductiveautomation.com/u/Chris_Bingham)\ **Post date:** [March 13, 2025, 4:36pm UTC](https://forum.inductiveautomation.com/t/ssl-certificate-expiry/103560/5 "2025-03-13T16:36:13Z")
> [@aryavani.m](#): > > Also, i have redundant servers. so, SSL needs to be renewed separately in both master and backup servers, right? Before I steer you in the wrong direction, it might be best to clearly identify which certificates are expiring. There are different certificates used throughout Ignition for different purposes. I started typing them out and linking to each, then found a page that Inductive already compiled: [Security Certificates](https://www.docs.inductiveautomation.com/docs/8.1/platform/security/security-certificates) Regarding Web Server SSL only, both of your gateways will host their own web server and will therefore need certs to be updated in each server manually - should have no impact to external devices using that connection - all as @aryavani.m mentioned above. This is one of the few things that does not sync between redundant gateways. ---
**Author:** ![aryavani.m](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@aryavani.m](https://forum.inductiveautomation.com/u/aryavani.m)\ **Post date:** [March 14, 2025, 4:33am UTC](https://forum.inductiveautomation.com/t/ssl-certificate-expiry/103560/6 "2025-03-14T04:33:22Z")
yes, i want to renew web server SSL certificate only. Thanks for your clarification.