# Vision Client Launcher - SSL Certificate Must Be Imported **URL:** \ **Category:** Ignition\ **Created:** [March 31, 2021, 1:30pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109 "2021-03-31T13:30:34Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![nicholas.robinson](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.robinson/32/22188_2.png) [@nicholas.robinson](https://forum.inductiveautomation.com/u/nicholas.robinson)\ **Post date:** [March 31, 2021, 1:30pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/1 "2021-03-31T13:30:34Z")
We have started the processing of moving all our gateways to SSL with SSO login. Yesterday we noted that after installing a SSL certificate, some of our members vision client launchers picked up the certificate just fine (automatically). However, others encountered the issue shown in the attached photo: **"SSL Certificate must be imported"** The work around is to import the SSL certificate manually. However, our expectation is that users do not have to do it manually and the vision client launcher should pick it up automatically like the designer does. Are we doing something wrong or is this room for improvement? ![Image20210331082917](https://us1.discourse-cdn.com/inductiveautomation/original/3X/b/e/be6e46d2a6d016b666ea583a6102fef15cec7130.jpeg) Thanks, Nick ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 31, 2021, 1:34pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/2 "2021-03-31T13:34:42Z")
When you say “some of our members vision client launchers picked up the certificate just fine (automatically).” are you talking about being shown a dialog prompting them to trust/reject the certificate? What version of Ignition and launchers are being used? ---
**Author:** ![nicholas.robinson](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.robinson/32/22188_2.png) [@nicholas.robinson](https://forum.inductiveautomation.com/u/nicholas.robinson)\ **Post date:** [March 31, 2021, 1:40pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/3 "2021-03-31T13:40:27Z")
@Kevin.Herron for me I am using the following versions: - Ignition 8.1.3 - Vision Client Launcher 1.1.3 When I open a designer that had that gateway previously on HTTP/8088 I was prompted to trust the certificate. For vision client launcher it just automatically said “Host Valid / Host Secure”. For vision client launcher there was no dialog to trust the certificate like the designer. Nick ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 31, 2021, 1:45pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/4 "2021-03-31T13:45:05Z")
I’m going to defer to @jcoffman since he knows more about the launchers. I’ll ping him in a couple hours if he hasn’t responded. ---
**Author:** ![jcoffman](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jcoffman/32/6429_2.png) [@jcoffman](https://forum.inductiveautomation.com/u/jcoffman)\ **Post date:** [March 31, 2021, 4:23pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/5 "2021-03-31T16:23:40Z")
the designer launcher and vision client launcher share the same backing certificates, could it be that you connected with either launcher prior to the attempt with the vision client launcher? Also, when you are shown `SSL Certificate must be imported` when you click `select gateway` you should see a certificate view appear with the ability to trust. do you not see this? ![Screen Recording 2021-03-31 at 9.21.56 AM](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/9/a9fc75449e2adbb873315d475a3ffbb9e01cc21a.gif) Also, is there anything special about the certificate? (wildcard etc) ---
**Author:** ![melwadeya](https://avatars.discourse-cdn.com/v4/letter/m/ed8c4c/32.png) [@melwadeya](https://forum.inductiveautomation.com/u/melwadeya)\ **Post date:** [July 2, 2022, 11:49pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/6 "2022-07-02T23:49:48Z")
Hello, I am using Ignition Edge 7.9.20 on Opto 22 Groov EPIC PR1. when I click Trust Certificate as in the GIF you shared, I get the following error message. any idea why? ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/f/afa340cd6bd7c2bc3edaa3aa3014761d95418dc8.png) ---
**Author:** ![mdd](https://avatars.discourse-cdn.com/v4/letter/m/43a26b/32.png) [@mdd](https://forum.inductiveautomation.com/u/mdd)\ **Post date:** [March 29, 2023, 6:00pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/7 "2023-03-29T18:00:39Z")
Unfortunately this error gives us users the impression we can't continue and need to fix something with certs on the Gateway. SMH. It should just say the "Host Secure" bit and when you press the blue button to continue, just prompt to trust the cert like it already does. That little error message just adds unnecessary confusion. ---
**Author:** ![jcoffman](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jcoffman/32/6429_2.png) [@jcoffman](https://forum.inductiveautomation.com/u/jcoffman)\ **Post date:** [March 29, 2023, 6:18pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/8 "2023-03-29T18:18:07Z")
> [@melwadeya](#): > > I am using Ignition Edge 7.9.20 on Opto 22 Groov EPIC PR1. > when I click Trust Certificate as in the GIF you shared, I get the following error message. any idea why? Sorry for the late response here, but it looks like you are using the 8.X compatible launchers here, which do not work with 7.9.x. It looks like something else is causing issues with a redirect, but try the Native Client Launcher for 7.9. > [@mdd](#): > > Unfortunately this error gives us users the impression we can't continue and need to fix something with certs on the Gateway. SMH. > > It should just say the "Host Secure" bit and when you press the blue button to continue, just prompt to trust the cert like it already doe Host Secure would be misleading though. The connection may use TLS, but we cant really say the host is "secure" since the certificate chain doesn't have a trusted root (either from a known CA or one your Org has already imported/trusted). Maybe that label can be something clearer, but saying "Host Secure" before just throwing the user into a prompt to trust a certificate isn't the right answer either. Ill think about a better message here that could be used though. ---
**Author:** ![mdd](https://avatars.discourse-cdn.com/v4/letter/m/43a26b/32.png) [@mdd](https://forum.inductiveautomation.com/u/mdd)\ **Post date:** [March 29, 2023, 6:53pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/9 "2023-03-29T18:53:16Z")
Thank you for responding. If you look below, you are already saying "Host Secure" before the cert is trusted. 🤷‍♂️ ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/7/176f6baf335a7eeb027b58111b48c7b8612b82c3.png) Probably better to have a single message "SSL Certificate must be reviewed and imported to Launcher" (so user can't assume its a Gateway cert that needs importing) and dynamically change the blue button ("Add Designer" or "Select Gateway") to what really will show next... such as "Review Cert". Speaking as a user. 😏 ---
**Author:** ![jcoffman](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jcoffman/32/6429_2.png) [@jcoffman](https://forum.inductiveautomation.com/u/jcoffman)\ **Post date:** [March 29, 2023, 7:47pm UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/10 "2023-03-29T19:47:32Z")
Sorry, I meant just Host Secure by itself without the import warning. Thanks for the feedback, Ill take a look at this. 👍 ---
**Author:** ![Zachary\_Wenrick](https://avatars.discourse-cdn.com/v4/letter/z/e9a140/32.png) [@Zachary\_Wenrick](https://forum.inductiveautomation.com/u/Zachary_Wenrick)\ **Post date:** [June 14, 2024, 12:30am UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/11 "2024-06-14T00:30:58Z")
I'm having a similar issues as described with Version: **8.1.39 (b2024040909)** When i try to manually add a remote device in the designer i get the following sequence: It appears a handshake with the host is established but the cert isn't trusted ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/9/7/975b82b9cb8aadd5494cc5957e04e187fbb06af6.png) But when I "Add Designer" I'm prompted to trust the certificate and it generates an error ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/6/a6f00c93127872d7303bd48d06de8621134ab72b.png) error: ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/a/3af9688e46a6c2a8cc6029d875afb4cf621ede4c.png) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [June 14, 2024, 1:03am UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/12 "2024-06-14T01:03:08Z")
You’ll probably need to work with support. A copy of the certificate and the information you’ve redacted are necessary to troubleshoot. ---
**Author:** ![nicholas.robinson](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nicholas.robinson/32/22188_2.png) [@nicholas.robinson](https://forum.inductiveautomation.com/u/nicholas.robinson)\ **Post date:** [June 14, 2024, 1:23am UTC](https://forum.inductiveautomation.com/t/vision-client-launcher-ssl-certificate-must-be-imported/45109/13 "2024-06-14T01:23:34Z")
are you using a self signed cert or an actual cert?