# TLS setup on MQTT modules ver. 4.0.29

**URL:** <https://forum.inductiveautomation.com/t/tls-setup-on-mqtt-modules-ver-4-0-29/108619>\
**Category:** Ignition\
**Created:** [July 17, 2025, 3:26pm UTC](https://forum.inductiveautomation.com/t/tls-setup-on-mqtt-modules-ver-4-0-29/108619 "2025-07-17T15:26:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![abermejo](https://avatars.discourse-cdn.com/v4/letter/a/bbce88/32.png) [@abermejo](https://forum.inductiveautomation.com/u/abermejo)\
**Post date:** [July 17, 2025, 3:26pm UTC](https://forum.inductiveautomation.com/t/tls-setup-on-mqtt-modules-ver-4-0-29/108619/1 "2025-07-17T15:26:35Z")

</div>

I am currently trying to setup TLS for my MQTT network, utilizing MQTT Distributor and Engine version 4.0.29.

I have never done this before so I followed the instructions from "Implementing MQTT in Ignition: Video 11" but I noticed that the configuration interfaces are different between the version used in the video and mine.

For my version, I only see options to upload files within config \> MQTT Engine Settings \> Server \> TLS.

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/2/6/268ba78086c7a330d02c1695fcda52724d9513fc.png)

Where do I upload my Java KeyStore file & enter my password?  
Where do I upload my my certificate file?

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [July 18, 2025, 11:29pm UTC](https://forum.inductiveautomation.com/t/tls-setup-on-mqtt-modules-ver-4-0-29/108619/2 "2025-07-18T23:29:03Z")

</div>

MQTT Distributor shares the [TLS certificate of the Ignition webserver](https://docs.inductiveautomation.com/docs/8.1/platform/gateway/config/web-server-settings/secure-communication-ssl-tls#adding-a-ca-signed-security-certificate). If you configure TLS for Ignition, that certificate will also front `8883/tcp` for `mqtts`. The config section for Engine is for setting up mutual TLS for authentication to a remote MQTT broker.

[This doc page](https://docs.chariot.io/display/CLD80/Secure+MQTT+Communication+using+SSL+or+TLS) from Cirrus Link might be useful.