...

Ignition will now show that you have successfully transitioned to self-signed certificate and that SSL /TLS is enabled.

Anchor
Certificate Certificate

Extract CA Certificate from ssl.pfx file

To allow the MQTT modules to validate the chain of trust for the self-signed certificate, you will need to upload the certificate CA Certificate to each module.

First you will need to extract the certificate CA Certificate chain from ssl.pfx file created in the webserver directory of your installed Ignition system

...