# Disable anonymous access to Igniton OPC UA server **URL:** \ **Category:** Ignition\ **Created:** [March 3, 2019, 9:38am UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018 "2019-03-03T09:38:12Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [March 3, 2019, 9:38am UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/1 "2019-03-03T09:38:12Z")
Hello When I enable Expose Tag providers in in OPC UA server, by default anonymous, no encryption access enable. How can I disable that and force only signed encryption access method be available? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 3, 2019, 2:36pm UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/2 "2019-03-03T14:36:42Z")
Anonymous access is not enabled by default, you must have turned it on in the `Configure > OPC-UA Server > Settings` area. The security policies are fixed and not configurable in 7.9. This has changed in 8.0. ---
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [March 3, 2019, 2:59pm UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/3 "2019-03-03T14:59:17Z")
Thanks Kevin, I was wrong someone before me enable it. If an opc UA client use unsigned certificate where should I accept the client certificate for the first time in Igniton? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 3, 2019, 3:16pm UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/4 "2019-03-03T15:16:27Z")
The OPC UA client and server in 7.9 accepts all certificates. This has also changed in 8.0 and there’s a config section to manage the certificates. ---
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [March 3, 2019, 3:49pm UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/5 "2019-03-03T15:49:43Z")
I set Allow anonymous Access to False and reset the server and go to kepware OPC Client and set Security policy to None. But Igniton accept the connection and expose all tag even though I disable anonymous Access!!! I think there is no security working in 7.9. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 3, 2019, 3:55pm UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/6 "2019-03-03T15:55:43Z")
> [@nader.chinichian](#): > > and reset the server Did you restart the gateway? Did you configure Kepware to connect with a username/password or did it still connect anonymously? > [@nader.chinichian](#): > > But Igniton accept the connection and expose all tag even though I disable anonymous Access!!! If you enabled the Exposed Tags setting they are exposed to any client that connects; there is no access control. ---
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [March 3, 2019, 4:09pm UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/7 "2019-03-03T16:09:02Z")
I reset the gateway. I configure kepware to connect to igniton as anonymous. In igniton 8 is there any security for exposed tags? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 3, 2019, 4:16pm UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/8 "2019-03-03T16:16:58Z")
No there’s no changes to exposed tags in 8.0 right now. What kind of access controls are you looking for? Allowing access to exposed tags based on roles or something finer grained? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 3, 2019, 5:56pm UTC](https://forum.inductiveautomation.com/t/disable-anonymous-access-to-igniton-opc-ua-server/23018/9 "2019-03-03T17:56:45Z")
In a pinch, you could use my [Ethernet/IP Module](https://inductiveautomation.com/moduleshowcase/module/automation-professionals-llc-ethernetip-class-1-communications) to create arbitrary data structures to publish via OPC. A simulator device on steroids, so to speak. They would be exposed on the OPC side, even if you didn’t make tags out of them. You wouldn’t needed to use the exposed tags setting at all, allowing you to restrict access.