# Cannot connect Kepware Version 6.7.1046 to Ignition 7.9.11

**URL:** <https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861>\
**Category:** Ignition\
**Created:** [July 24, 2019, 10:06pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861 "2019-07-24T22:06:44Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![19tb21](https://avatars.discourse-cdn.com/v4/letter/1/0ea827/32.png) [@19tb21](https://forum.inductiveautomation.com/u/19tb21)\
**Post date:** [July 24, 2019, 10:06pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/1 "2019-07-24T22:06:44Z")

</div>

I have never had any issues in the past connecting Ignition to a Kepserver. For whatever reason a certificate is not generated in “Trusted Clients” after Ignition attempts to connect. Manually importing a cert is not working either. Does anyone have any experience with the latest Kepware release and 7.9.11?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 24, 2019, 10:10pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/2 "2019-07-24T22:10:11Z")

</div>

Are you sure the certificate is the issue here?

Is there a stack trace or error for this connection in the status area of the gateway?

---

<div class="post-metadata">

**Author:** ![19tb21](https://avatars.discourse-cdn.com/v4/letter/1/0ea827/32.png) [@19tb21](https://forum.inductiveautomation.com/u/19tb21)\
**Post date:** [July 24, 2019, 10:13pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/3 "2019-07-24T22:13:32Z")

</div>

Now it is saying

`[remote=COCOKEPWARE02.woodward.com/10.152.208.29:49320] errorMessage=ErrorMessage{error=StatusCode{name=Bad_SecurityChecksFailed, value=0x80130000, quality=bad}, reason=An error occurred verifying security.}`

However, it has given me a number of different errors. At one point it did show up as a Trusted Client and then disappeared. It is very odd

I am sure I am using the correct credentials for security.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 24, 2019, 10:16pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/4 "2019-07-24T22:16:20Z")

</div>

Well, this one in particular is KSE sending back an error message saying `Bad_SecurityChecksFailed` for some reason.

It could be the certificate isn’t trusted, or it could be something else about the certificate it doesn’t like, but there’s not much more detail you can find on the Ignition side of things. Is this certificate showing up in KSE now?

---

<div class="post-metadata">

**Author:** ![19tb21](https://avatars.discourse-cdn.com/v4/letter/1/0ea827/32.png) [@19tb21](https://forum.inductiveautomation.com/u/19tb21)\
**Post date:** [July 24, 2019, 10:18pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/5 "2019-07-24T22:18:13Z")

</div>

No not at all, but it did briefly. I have re-initialized, rebooted, deleted, re-created. I have never had this much trouble and have other Kepservers working fine. Per your manual it should just show up. I will manually import it again and see if I get the same error.

---

<div class="post-metadata">

**Author:** ![19tb21](https://avatars.discourse-cdn.com/v4/letter/1/0ea827/32.png) [@19tb21](https://forum.inductiveautomation.com/u/19tb21)\
**Post date:** [July 24, 2019, 10:27pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/6 "2019-07-24T22:27:12Z")

</div>

Update: same error

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 24, 2019, 10:48pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/7 "2019-07-24T22:48:53Z")

</div>

As a sanity check I just did a clean install of 7.9.11 and connected it to KSE 6.7 without any problems.

In the Ignition gateway, under Configure \> OPC-UA Server \> Certificates, try regenerating the client certificate and then restarting Ignition.

If this doesn’t work you’ll probably need to call Kepware and see if they can turn on some logging or have some way to tell you why the Bad\_SecurityChecksFailed error is being sent.

---

<div class="post-metadata">

**Author:** ![19tb21](https://avatars.discourse-cdn.com/v4/letter/1/0ea827/32.png) [@19tb21](https://forum.inductiveautomation.com/u/19tb21)\
**Post date:** [July 24, 2019, 11:00pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/8 "2019-07-24T23:00:12Z")

</div>

Ok I tried that and still, same issue… It just never shows up under “Trusted Clients”. I will call Kepware (PTC ☹) tomorrow and see if they can help.

---

<div class="post-metadata">

**Author:** ![19tb21](https://avatars.discourse-cdn.com/v4/letter/1/0ea827/32.png) [@19tb21](https://forum.inductiveautomation.com/u/19tb21)\
**Post date:** [July 25, 2019, 3:45pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/9 "2019-07-25T15:45:58Z")

</div>

Just to be clear Kevin, you tested with some level of encryption/security right? I can make it work if I have no security, and looking across our Ignition Gateways it looks like that is how we have set it up.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 25, 2019, 3:52pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/10 "2019-07-25T15:52:08Z")

</div>

Yeah, I used Basic128Rsa15. The connection was faulted until I marked the Ignition client certificate trusted in KSE.

---

<div class="post-metadata">

**Author:** ![19tb21](https://avatars.discourse-cdn.com/v4/letter/1/0ea827/32.png) [@19tb21](https://forum.inductiveautomation.com/u/19tb21)\
**Post date:** [August 22, 2019, 6:48pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/11 "2019-08-22T18:48:07Z")

</div>

Eventually I got this working, by the way. The key was to always allow anonymous access.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [August 22, 2019, 7:04pm UTC](https://forum.inductiveautomation.com/t/cannot-connect-kepware-version-6-7-1046-to-ignition-7-9-11/26861/12 "2019-08-22T19:04:56Z")

</div>

Thanks for coming back to update 👍
