# EcoStruxure OPC UA + Ignition issue

**URL:** <https://forum.inductiveautomation.com/t/ecostruxure-opc-ua-ignition-issue/42547>\
**Category:** Ignition\
**Tags:** ignition80\
**Created:** [January 23, 2021, 12:43pm UTC](https://forum.inductiveautomation.com/t/ecostruxure-opc-ua-ignition-issue/42547 "2021-01-23T12:43:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![dtrottier](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@dtrottier](https://forum.inductiveautomation.com/u/dtrottier)\
**Post date:** [January 23, 2021, 12:43pm UTC](https://forum.inductiveautomation.com/t/ecostruxure-opc-ua-ignition-issue/42547/1 "2021-01-23T12:43:34Z")

</div>

Hi,

I’ve been having issue to link Ecostruxure OPC UA with Ignition, I’ve been able to trust certificate and add the ignition Cert to Ecostruxure but now I’m facing this error :

io.netty.handler.codec.DecoderException: UaException: status=Bad\_CertificateUseNotAllowed, message=required KeyUsage ‘keyEncipherment’ not found

The ignition certificate seem to provide Key Encipherment

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/d/2/d2126619e6178ce37694ac2b09a30c364c56ada4.png)

But the ecoxstructure does not seem to provide it:

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/3/0307a5519602af10e36323d66ef9d3f42e1e2f9f.png)

Anyone has successfully connected Ecostruxure to Ignition ?

Ecostruxure OPC UA V 2.1.4903.0  
Ignition 8.1.1

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [January 23, 2021, 2:33pm UTC](https://forum.inductiveautomation.com/t/ecostruxure-opc-ua-ignition-issue/42547/2 "2021-01-23T14:33:03Z")

</div>

I think you meant to say they _don’t_ provide it, right?

You should report this to EcoStruxure and work with them to get a valid OPC UA certificate generated. In the meantime, though, there should be an advanced setting on the OPC UA connection in Ignition to disable certificate validation.

---

<div class="post-metadata">

**Author:** ![dtrottier](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@dtrottier](https://forum.inductiveautomation.com/u/dtrottier)\
**Post date:** [January 23, 2021, 3:02pm UTC](https://forum.inductiveautomation.com/t/ecostruxure-opc-ua-ignition-issue/42547/3 "2021-01-23T15:02:12Z")

</div>

Right, I corrected my question !

Else, the Advanced setting did work as a fix, I will talk with Schneider about the cert.

For anyone that might encounter the same issue :

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/c/6cebd6bc9409841e8391bef0e1db45b07ed71587.png)

Thanks

---

<div class="post-metadata">

**Author:** ![Michal\_Ciupka](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@Michal\_Ciupka](https://forum.inductiveautomation.com/u/Michal_Ciupka)\
**Post date:** [June 25, 2024, 5:20pm UTC](https://forum.inductiveautomation.com/t/ecostruxure-opc-ua-ignition-issue/42547/4 "2024-06-25T17:20:33Z")

</div>

> [@dtrottier](#):
>
> e, the Advanced setting did work as a fix, I will talk with Schneider about the cert.
> 
> For anyone that might encounter the same issue :

Have you talk to Schneider? Any success? I have the same issue.

---

<div class="post-metadata">

**Author:** ![dtrottier](https://avatars.discourse-cdn.com/v4/letter/d/b5a626/32.png) [@dtrottier](https://forum.inductiveautomation.com/u/dtrottier)\
**Post date:** [June 25, 2024, 6:04pm UTC](https://forum.inductiveautomation.com/t/ecostruxure-opc-ua-ignition-issue/42547/5 "2024-06-25T18:04:10Z")

</div>

Our project when down, so I never had time to make it work.

But you might check this :

[https://www.docs.inductiveautomation.com/docs/8.1/ignition-modules/opc-ua/opc-ua-security](https://www.docs.inductiveautomation.com/docs/8.1/ignition-modules/opc-ua/opc-ua-security)

[EcoStruxure™ - OPC UA Server Expert - User Guide - 11/2019 (schneider-electric.com)](https://download.schneider-electric.com/files?p_Doc_Ref=MFR53158&p_enDocType=User+guide&p_File_Name=MFR53158.02.pdf)

If you are able to create a cert in your ignition an authorize it on your OPC UA it should work !