# Authentication to Ignition OPC UA Server **URL:** \ **Category:** Ignition\ **Tags:** ignition80\ **Created:** [June 10, 2020, 2:41pm UTC](https://forum.inductiveautomation.com/t/authentication-to-ignition-opc-ua-server/35502 "2020-06-10T14:41:23Z")\ **Posts on this page:** 1\ **Showing post:** 19
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [October 10, 2024, 8:26pm UTC](https://forum.inductiveautomation.com/t/authentication-to-ignition-opc-ua-server/35502/19 "2024-10-10T20:26:09Z")
There's nothing actually wrong with the OPC UA module, it's just configured in a way that exposed a bunch of clients that didn't know what they were doing ☹ This configuration is changing for 8.3. > [@Error installing security token](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/4): > > Okay, it’s what I suggested. By default Ignition’s OPC UA server only accepts secured connections at opc.tcp://10.122.220.204:62541. Unsecured discovery services can be found running at opc.tcp://10.122.220.204:62541/discovery. Some clients are defective and can’t handle this kind of setup. If that’s the case here, you change the configuration of Ignition’s server to allow None,Basic256Sha256 for its security policies (and restart) then this client will probably be able to connect. > [@Failed to connect Ignition OPC-UA server using Sign And Encrypt mechanism via Python OPC-UA client](https://forum.inductiveautomation.com/t/failed-to-connect-ignition-opc-ua-server-using-sign-and-encrypt-mechanism-via-python-opc-ua-client/16865/16): > > It looks like the most recent error in the logs doesn’t have anything to do with certificates now: E [o.e.m.o.s.s.t.u.UascServerAsymmetricHandler] [12:54:16]: Error installing security token: StatusCode{name=Bad\_SecurityChecksFailed, value=0x80130000, quality=bad} org.eclipse.milo.opcua.stack.core.UaException: no matching endpoint found: transportProfile=TCP\_UASC\_UABINARY, endpointUrl=opc.tcp://192.168.47.128:62541/discovery, securityPolicy=Basic256Sha256, securityMode=SignAndEncrypt at org.… > [@OPC-UA Client connection issues](https://forum.inductiveautomation.com/t/opc-ua-client-connection-issues/79799/2): > > You may need to point the software at the discovery endpoint instead: opc.tcp://host:62541/discovery. This is at least what you would need to do with UaExpert via its "custom discovery" flow. The server has two endpoints: one for discovery, one for sessions. The discovery endpoint is unsecured, and the session endpoint only allows secured connections by default. You're pointing your software at the session endpoint, and despite configuring it to use security, it's probably trying to start with … --- _[View the full topic](https://forum.inductiveautomation.com/t/authentication-to-ignition-opc-ua-server/35502)._