# Error installing security token

**URL:** <https://forum.inductiveautomation.com/t/error-installing-security-token/35562>\
**Category:** Ignition\
**Created:** [June 11, 2020, 4:36pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562 "2020-06-11T16:36:55Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Juan1](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@Juan1](https://forum.inductiveautomation.com/u/Juan1)\
**Post date:** [June 11, 2020, 4:36pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/1 "2020-06-11T16:36:55Z")

</div>

I am trying to connect to my ignition server with a python opcua application. I have the ignition up and running and i can connect to it with my prosys opc ua client but when i try connecting to it with my python code i get a time out error. When i check my ignition log i can see the attempt to connect from my python code. I though all i would need to do is accept the quarantined certificate but there is none.

Any suggestions?

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/e/e7df36c4a309b1b2d9a8953f5f1e6c21bc564740.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [June 11, 2020, 4:51pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/2 "2020-06-11T16:51:47Z")

</div>

Can you copy and paste the full text of that stack trace?

I think it’s probably saying that your client is trying to connect without security to an endpoint that requires security.

---

<div class="post-metadata">

**Author:** ![Juan1](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@Juan1](https://forum.inductiveautomation.com/u/Juan1)\
**Post date:** [June 11, 2020, 5:06pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/3 "2020-06-11T17:06:00Z")

</div>

org.eclipse.milo.opcua.stack.core.UaException: no matching endpoint found: transportProfile=TCP\_UASC\_UABINARY, endpointUrl=opc.tcp://10.122.220.204:62541, securityPolicy=None, securityMode=None

at org.eclipse.milo.opcua.stack.server.transport.uasc.UascServerAsymmetricHandler.lambda$openSecureChannel$3(UascServerAsymmetricHandler.java:407)

at java.base/java.util.Optional.orElseThrow(Unknown Source)

at org.eclipse.milo.opcua.stack.server.transport.uasc.UascServerAsymmetricHandler.openSecureChannel(UascServerAsymmetricHandler.java:397)

at org.eclipse.milo.opcua.stack.server.transport.uasc.UascServerAsymmetricHandler.lambda$sendOpenSecureChannelResponse$1(UascServerAsymmetricHandler.java:301)

at org.eclipse.milo.opcua.stack.core.channel.SerializationQueue.lambda$encode$0(SerializationQueue.java:57)

at org.eclipse.milo.opcua.stack.core.util.ExecutionQueue$Task.run(ExecutionQueue.java:119)

at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.base/java.lang.Thread.run(Unknown Source)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [June 11, 2020, 5:14pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/4 "2020-06-11T17:14:01Z")

</div>

Okay, it’s what I suggested. By default Ignition’s OPC UA server only accepts secured connections at `opc.tcp://10.122.220.204:62541`. Unsecured discovery services can be found running at `opc.tcp://10.122.220.204:62541/discovery`.

Some clients are defective and can’t handle this kind of setup. If that’s the case here, you change the configuration of Ignition’s server to allow `None,Basic256Sha256` for its security policies (and restart) then this client will probably be able to connect.

---

<div class="post-metadata">

**Author:** ![Juan1](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@Juan1](https://forum.inductiveautomation.com/u/Juan1)\
**Post date:** [June 11, 2020, 5:49pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/5 "2020-06-11T17:49:34Z")

</div>

I tried changing ignition to none but then i get a fault on the ignitiion opc server

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/f/fd768f4ed1d49d8c89e47a5baeeeaec8966b1eee.png)

UaException: status=Bad\_ConfigurationError, message=no matching endpoints found  
at com.inductiveautomation.ignition.gateway.opcua.client.ClientManager.initializeObject(ClientManager.kt:118)  
at com.inductiveautomation.ignition.gateway.opcua.client.ClientManager$initializeObject$1.invokeSuspend(ClientManager.kt)  
at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)  
at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:56)  
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)  
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)  
at java.base/java.lang.Thread.run(Unknown Source)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [June 11, 2020, 5:54pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/6 "2020-06-11T17:54:49Z")

</div>

If you changed it to _just_ None then the connection faulted because it’s configured to connect with security.

Change it to `None,Basic256Sha256` as I suggested.

---

<div class="post-metadata">

**Author:** ![Juan1](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@Juan1](https://forum.inductiveautomation.com/u/Juan1)\
**Post date:** [June 11, 2020, 6:09pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/7 "2020-06-11T18:09:52Z")

</div>

This is how i configured it  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/2/219d15d803052c2655b109cc029a7c6ff3c16202.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [June 11, 2020, 7:27pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/8 "2020-06-11T19:27:59Z")

</div>

You should be editing the server settings under OPC UA \> Server Settings, not editing your client connection to the local server.

---

<div class="post-metadata">

**Author:** ![Juan1](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@Juan1](https://forum.inductiveautomation.com/u/Juan1)\
**Post date:** [June 11, 2020, 8:18pm UTC](https://forum.inductiveautomation.com/t/error-installing-security-token/35562/9 "2020-06-11T20:18:02Z")

</div>

Ok … gotcha … i see where i went wrong.

thanks  
it is working now.

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/c/ce80b07348bb0d91eda5daddcbc84a4005d90257.png)
