# X509 certificate authentication for OPC UA clients **URL:** \ **Category:** Ignition\ **Tags:** ignition81\ **Created:** [August 10, 2023, 4:13pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-authentication-for-opc-ua-clients/77704 "2023-08-10T16:13:43Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Derek\_Rowland](https://avatars.discourse-cdn.com/v4/letter/d/74df32/32.png) [@Derek\_Rowland](https://forum.inductiveautomation.com/u/Derek_Rowland)\ **Post date:** [August 10, 2023, 4:13pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-authentication-for-opc-ua-clients/77704/1 "2023-08-10T16:13:43Z")
Is there any update since [this thread from 2021](https://forum.inductiveautomation.com/t/cert-only-outbound-opc-connection-from-ignition/44791/2) on OPC UA X509 certificate authentication? I am trying to experiment with Rockwell's FT Optix Studio and setup an OPC UA connection to one of our Ignition development servers. FT Optix does not appear to support username/password authentication, and Ignition does not appear to support X509 cert authentication. Has this been implemented, or is it on the road map? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 11, 2023, 12:00am UTC](https://forum.inductiveautomation.com/t/x509-certificate-authentication-for-opc-ua-clients/77704/2 "2023-08-11T00:00:59Z")
It hasn’t been, but I can take a look when I’m back next week and see how much work it would be to add. If I remember correctly it’s mostly just awkward because our configuration/settings model is a little too limited right now and I don’t quite know how or where the KeyStore that holds the certificate and private key would be stored and accessed. ---
**Author:** ![eeem](https://avatars.discourse-cdn.com/v4/letter/e/779978/32.png) [@eeem](https://forum.inductiveautomation.com/u/eeem)\ **Post date:** [June 21, 2024, 8:21pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-authentication-for-opc-ua-clients/77704/3 "2024-06-21T20:21:39Z")
Hi Kevin, do you know by any chance if the certificate authentication method on the OPC UA server will be part of the roadmap in the near future? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [June 21, 2024, 8:23pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-authentication-for-opc-ua-clients/77704/4 "2024-06-21T20:23:02Z")
Not "near", no. It would be some time after 8.3.0. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [September 11, 2025, 1:42pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-authentication-for-opc-ua-clients/77704/5 "2025-09-11T13:42:39Z")
> [@\[IGN-9275\] OPC UA client X509 authentication](https://forum.inductiveautomation.com/t/ign-9275-opc-ua-client-x509-authentication/107512/3): > > This has been implemented and it's sitting in a long queue of work targeting 8.3.1. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [September 11, 2025, 1:44pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-authentication-for-opc-ua-clients/77704/6 "2025-09-11T13:44:27Z")
> [@eeem](#): > > Hi Kevin, do you know by any chance if the certificate authentication method on the OPC UA server will be part of the roadmap in the near future? X509 auth for the Ignition OPC UA _Server_ is not currently planned. It doesn't really fit into our user/profile model in any satisfactory way. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [April 28, 2026, 1:18pm UTC](https://forum.inductiveautomation.com/t/x509-certificate-authentication-for-opc-ua-clients/77704/7 "2026-04-28T13:18:52Z")
Support for X509 authentication in Ignition's OPC UA client connections shipped in 8.3.3. Still no plan to support it in the server right now.