Ignore server certificate errors

The installable cloud app client can suppress certain type(s) of certificate error from server.

You can either set the option in the project before deployment, or dynamically set the option after deployment via the CustomizeDeploy.dll tool.

To set the option in the project before deployment,

Step 1: Go to the PowerServer project painter > Security page, and then select or enter a value in the Whether to ignore server certificate box.

Note

The "Whether to ignore server certificate" option is moved from the Client/Server Application properties page to the PowerServer project painter starting from Version 2025.

The value of "ignorecertificate" can be 0, 1, 2, 4, 8, 999, or a sum of two or more values of 1, 2, 4, 8 (each value representing one type of error). For example, the value 3 means ignoring unknown certificate authentication (CA) and certificates whose date is invalid. The value 0 means all of the certificate errors will be ignored.

  • 0 -- ignores all certificate errors

  • 1 -- ignores unknown certificate authentication (CA)

  • 2 -- ignores certificates whose date is invalid

  • 4 -- ignores certificates whose common name (CN) is invalid

  • 8 -- ignores certificates with incorrect usage

  • 999 -- do not ignore


It is recommended to ignore certificate errors only in the development or testing environment; in the production environment, you'd better resolve (rather than ignore) the certificate errors.

Note

In version 2022 or later, the Whether to ignore server certificate option is set to 999 -- do not ignore by default (which means certificate error will NOT be ignored, and will be shown to the user); however in version 2021, all certificate errors are ignored by default. Therefore, if you encounter the certificate error in version 2022 or later, you can consider changing the value to 0 -- ignores all certificate errors to ignore the errors (just like version 2021). Note that this is only recommended for the development & testing environment.

Step 2: Deploy the PowerServer project to make the above setting effective.

If you want to set the ignore option for an application after it is deployed, you can use the CustomizeDeploy.dll tool.

Step 1: Open Command Prompt and navigate to the server root folder > [appname] folder > [version] folder. Make sure you navigate to the folder of the current deployment version, for example, C:\inetpub\wwwroot\salesdemo_cloud\1.01.

Step 2: Execute the CustomizeDeploy.dll file using the dotnet command to get or set the value.

The value of "ignorecertificate" can be 0, 1, 2, 4, 8, 999, or a sum of two or more values of 1, 2, 4, 8. If "ignorecertificate" is specified without a value, the current value will be returned.

To get the current value, execute

dotnet CustomizeDeploy.dll -ignorecertificate

To set the value, execute

dotnet CustomizeDeploy.dll -ignorecertificate=<value>


For more about CustomizeDeploy.dll, refer to the section Change the deployed app using commands.