# \[URGENT\] what happens when we use our ignition opc ua server for modbus assets and the opc ua sever certificate expires? **URL:** \ **Category:** Ignition\ **Tags:** ignition81\ **Created:** [February 11, 2025, 11:24am UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152 "2025-02-11T11:24:46Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Zied\_Brahmi](https://avatars.discourse-cdn.com/v4/letter/z/5daacb/32.png) [@Zied\_Brahmi](https://forum.inductiveautomation.com/u/Zied_Brahmi)\ **Post date:** [February 11, 2025, 11:24am UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/1 "2025-02-11T11:24:46Z")
Hello Forum, we are using the ignition opc ua server (the loopback) and we are using it for modbus assets, and the certificate expired but connection is still working. I want to regenerate a certificate but I want to know if this will kill our connection to the modbus assets or for the loopback server it's just internal and we will do all configuration inside ignition (because we do not have direct access to the assets!!) I want to know how ignition uses the loopback server when using modbus! Please Help 🙂 . Have a good day. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [February 11, 2025, 1:15pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/2 "2025-02-11T13:15:34Z")
Your devices will be briefly interrupted. Ignition uses its OPC client for all access to OPC values, including those exposed in its internal OPC server. ---
**Author:** ![Zied\_Brahmi](https://avatars.discourse-cdn.com/v4/letter/z/5daacb/32.png) [@Zied\_Brahmi](https://forum.inductiveautomation.com/u/Zied_Brahmi)\ **Post date:** [February 11, 2025, 1:18pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/3 "2025-02-11T13:18:50Z")
Thank you for your response, so I will just need to regenerate it? and I don't need to put it in another part to be trusted? it will be directly configured because it's internal to ignition right. also I m doing the tests on our dev and I see that our modbus cannot reconnect it says reconnecting after that it disconnects, please where can I see the logs of the modbus connection. [I m seeing the logs (status -\> connections -\> devices)] ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [February 11, 2025, 1:32pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/4 "2025-02-11T13:32:29Z")
> [@Zied\_Brahmi](#): > > I don't need to put it in another part to be trusted? Pretty sure you will. (Also, with modern Ignition, you can set a long expiration on your regenerated certificate.) > [@Zied\_Brahmi](#): > > our modbus cannot reconnect it says reconnecting after that it disconnects That is directly related to your problem with the OPC certificate. It could be that your devices disconnect when idle (commonly ten seconds on many devices), and they are idle because your OPC problem is preventing any subscriptions from being set up. So it mix fix itself when the OPC connection is fixed. ---
**Author:** ![Zied\_Brahmi](https://avatars.discourse-cdn.com/v4/letter/z/5daacb/32.png) [@Zied\_Brahmi](https://forum.inductiveautomation.com/u/Zied_Brahmi)\ **Post date:** [February 11, 2025, 1:35pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/5 "2025-02-11T13:35:32Z")
Ok, so I need to put the certificate in another place in order to reconnect, where do I need to put it? in my modbus device? (excuse my ignorance..) ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [February 11, 2025, 1:48pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/6 "2025-02-11T13:48:58Z")
No, entirely within Ignition. (Sorry, I don't normally run my own Ignition instances long enough for the OPC cert to expire, and my clients have all navigated it without my help.) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [February 11, 2025, 2:34pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/7 "2025-02-11T14:34:05Z")
> **[OPC UA Security | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/ignition-modules/opc-ua/opc-ua-security#regenerate-current-certificates)** > > On the OPC UA security page you can manage OPC UA certificates for the client and server. Trusted certificates can be imported and quarantined certificates can be marked as trusted. When the OPC UA module (or better, Gateway) is restarted you will temporarily lose connection to all of your devices. ---
**Author:** ![Zied\_Brahmi](https://avatars.discourse-cdn.com/v4/letter/z/5daacb/32.png) [@Zied\_Brahmi](https://forum.inductiveautomation.com/u/Zied_Brahmi)\ **Post date:** [February 11, 2025, 2:42pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/8 "2025-02-11T14:42:13Z")
thank you, I really want to know what is the flow of the certificates when using the loopback server of ignition. basically client and server share the certificate and they check each other identity right? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [February 11, 2025, 2:45pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/9 "2025-02-11T14:45:27Z")
The certificate is validated like it would be for any other external OPC UA application. The only special behavior is that when the OPC UA module starts up it makes sure that the client and server mutually trust each other's certificate. The internal/loopback connection is not special in any other way, and the server does not treat it specially otherwise. ---
**Author:** ![Zied\_Brahmi](https://avatars.discourse-cdn.com/v4/letter/z/5daacb/32.png) [@Zied\_Brahmi](https://forum.inductiveautomation.com/u/Zied_Brahmi)\ **Post date:** [February 11, 2025, 3:26pm UTC](https://forum.inductiveautomation.com/t/urgent-what-happens-when-we-use-our-ignition-opc-ua-server-for-modbus-assets-and-the-opc-ua-sever-certificate-expires/102152/10 "2025-02-11T15:26:16Z")
Thank you for your answers , now I have a clearer vision