> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.itential.com/adapters/troubleshooting/depth-zero-self-signed-cert/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server.

# DEPTH_ZERO_SELF_SIGNED_CERT error

> How to resolve the DEPTH_ZERO_SELF_SIGNED_CERT SSL error when connecting to a server with a self-signed certificate.

## Issue

The adapter logs show a `DEPTH_ZERO_SELF_SIGNED_CERT` error when attempting to connect.

## Cause

This error occurs when the adapter makes an HTTPS request to a server that presents a self-signed SSL/TLS certificate, and the adapter is not configured to trust it.

## What to do

Choose one of the following approaches depending on your environment.

**Enable SSL in the service instance configuration.** Confirm that `ssl.enabled` is set to `true`. This is required before any of the options below will apply.

```json
"ssl": {
  "enabled": true,
  "accept_invalid_cert": false,
  "ca_file": "",
  "key_file": "",
  "cert_file": "",
  "ecdhCurve": "",
  "secure_protocol": "SSLv3_method",
  "ciphers": ""
}
```

**Accept invalid certificates (development and testing only).** Set `accept_invalid_cert` to `true` to bypass certificate validation entirely. The adapter will accept the self-signed certificate without verifying it.

Do not use `accept_invalid_cert: true` in production environments.

```json
"ssl": {
  "enabled": true,
  "accept_invalid_cert": true,
  ...
}
```

**Provide a CA file (recommended for production).** Save the CA file — which contains the public key of the certificate authority that issued the server's certificate — on theItential Platform server. Set `ca_file` to the file path. The adapter will validate the certificate against this CA.

```json
"ssl": {
  "enabled": true,
  "accept_invalid_cert": false,
  "ca_file": "/root/mycafile",
  ...
}
```

**Install the certificate as a trusted certificate.** In some environments, you may install the server's self-signed certificate in the client's trusted certificate store. Once installed, the adapter will recognize it as valid. Set the appropriate values under `ssl` in the service instance configuration. See [SSL properties](/adapters/configure/service-instance-configuration/properties/overview) for the full property reference.

**Obtain a certificate from a trusted CA.** For production environments, the recommended approach is to replace the self-signed certificate with one issued by a recognized certificate authority. Once the server presents a trusted certificate, the error will not occur.

If you are unable to resolve the issue, contact the Itential Adapters Team with the log output.

> How to resolve the DEPTH_ZERO_SELF_SIGNED_CERT SSL error when connecting to a server with a self-signed certificate.