# Two certificates SSL

**URL:** <https://forum.inductiveautomation.com/t/two-certificates-ssl/99121>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [November 26, 2024, 2:31pm UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121 "2024-11-26T14:31:24Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![taguililla](https://avatars.discourse-cdn.com/v4/letter/t/f9ae1b/32.png) [@taguililla](https://forum.inductiveautomation.com/u/taguililla)\
**Post date:** [November 26, 2024, 2:31pm UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121/1 "2024-11-26T14:31:24Z")

</div>

Hello, good morning.

Is it possible install two SLL certificates for two different domains in the same gateway? If the answer is yes, how do it?

I'm waiting for your answer.

Best regards.

 ![imagen](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/e/5e7f112e08044f287ec5e006e92f818096bd9340.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 26, 2024, 2:40pm UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121/2 "2024-11-26T14:40:19Z")

</div>

No, it's not.

---

<div class="post-metadata">

**Author:** ![taguililla](https://avatars.discourse-cdn.com/v4/letter/t/f9ae1b/32.png) [@taguililla](https://forum.inductiveautomation.com/u/taguililla)\
**Post date:** [November 26, 2024, 3:11pm UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121/3 "2024-11-26T15:11:28Z")

</div>

Hello Kevin.

Thank you.

It is possible install an only SSL certificate with two domains?

Or do you know any way?

Best regards.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 26, 2024, 3:15pm UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121/4 "2024-11-26T15:15:16Z")

</div>

Certificate Authorities do have multi-domain certificate options. You can also put multiple IP addresses and hostnames into the self-signed certificate that Ignition can generate.

What's the use case you're trying to solve? Maybe there is some other way?

---

<div class="post-metadata">

**Author:** ![taguililla](https://avatars.discourse-cdn.com/v4/letter/t/f9ae1b/32.png) [@taguililla](https://forum.inductiveautomation.com/u/taguililla)\
**Post date:** [November 26, 2024, 3:23pm UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121/5 "2024-11-26T15:23:45Z")

</div>

Hello, thank you.

We need access to two different project, through different URL to the same gateway. And we need the certificate in both.

I'm waiting for your answer.

Best regard.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 26, 2024, 3:26pm UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121/6 "2024-11-26T15:26:39Z")

</div>

I'm not sure if this is fully possible without resorting to redirection or maybe a reverse proxy. At a certain level the gateway must be configured with a single outward facing public address that is used by Perspective and Vision client sessions.

> **[Web Server Settings | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/platform/gateway/config/web-server-settings#public-http-address)**
>
> The Web Server page is for configuring the HTTP and HTTPS ports, enabling SSL/TLS, redirecting traffic through a known address, and specifying whether or not all HTTP traffic should be forcefully redirecting to HTTPS.

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [November 26, 2024, 3:31pm UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121/7 "2024-11-26T15:31:48Z")

</div>

What I've done to accomplish this is using a reverse proxy and redirects. For example I have `project1.mydomain.com` and `project2.mydomain.com` (pick any 2 domains, as this doesn't matter), and then a 3rd domain that's generic like `ignition.mydomain.com` that Ignition itself uses. The `project1` and `project2` domains have redirects in my reverse proxy that point to `https://ignition.mydomain.com/data/perspective/client/project1` and `https://ignition.mydomain.com/data/perspective/client/project2` repsectively. The end user has an easy to remember domain name, and Ignition works fine with the single common domain name then.

---

<div class="post-metadata">

**Author:** ![taguililla](https://avatars.discourse-cdn.com/v4/letter/t/f9ae1b/32.png) [@taguililla](https://forum.inductiveautomation.com/u/taguililla)\
**Post date:** [November 29, 2024, 11:45am UTC](https://forum.inductiveautomation.com/t/two-certificates-ssl/99121/8 "2024-11-29T11:45:13Z")

</div>

Hello.

Thank you, we have solicited a multi-domain certificate.

Best regards.
