# KEPserverEX 6.0 --- BROKEN **URL:** \ **Category:** Ignition\ **Created:** [November 22, 2016, 9:13pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394 "2016-11-22T21:13:42Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![cmisztur2](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cmisztur2/32/4243_2.png) [@cmisztur2](https://forum.inductiveautomation.com/u/cmisztur2)\ **Post date:** [November 22, 2016, 9:13pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/1 "2016-11-22T21:13:42Z")
❗ [color=#FF0000]Secure OPCUA 4.9.0 conections from Ignition 7.8.2/7.9 into Kepware 6.0 are broken.[/color] You must allow anonymous OPCUA connections into Kepware 6.0. Even then, when Kepware Runtime is reinitialized, you must edit the OPCUA connection and re-save. Ticket open with IA 40220. Ticket open with Kepware 102537. /chris ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [November 23, 2016, 3:57am UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/2 "2016-11-23T03:57:05Z")
Is your connection to KEPserver local or remote? Running locally, 7.8.4 and 7.9.0 both connect without issue for me. All I had to do was make sure the client certificate was trusted. ---
**Author:** ![dbortolini](https://avatars.discourse-cdn.com/v4/letter/d/3e96dc/32.png) [@dbortolini](https://forum.inductiveautomation.com/u/dbortolini)\ **Post date:** [November 23, 2016, 5:34pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/3 "2016-11-23T17:34:29Z")
Hello everybody, I have the same issue in my system. I have Kepware 6 and Ignition 7.9 both on different machines and if I try to setup a non anonymous connection I get this error Bad\_SecurityChecksFailed. Tried as well to change the channel encryption from SignAndEncrypt to None but no way. It works only in anonymous mode. Davide Bortolini ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [November 23, 2016, 5:46pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/4 "2016-11-23T17:46:30Z")
I can’t reproduce this and there’s nothing you can do on the Ignition side to get more information than the Bad\_SecurityChecksFailed StatusCode. We’ll have to wait to hear from Kepware. ---
**Author:** ![dbortolini](https://avatars.discourse-cdn.com/v4/letter/d/3e96dc/32.png) [@dbortolini](https://forum.inductiveautomation.com/u/dbortolini)\ **Post date:** [November 23, 2016, 9:04pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/5 "2016-11-23T21:04:18Z")
I have captured the UA transaction from Kepware. Below is the transcript. Hope this helps. Davide Bortolini ---
**Author:** ![dbortolini](https://avatars.discourse-cdn.com/v4/letter/d/3e96dc/32.png) [@dbortolini](https://forum.inductiveautomation.com/u/dbortolini)\ **Post date:** [November 28, 2016, 8:09pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/6 "2016-11-28T20:09:43Z")
Any update about that? Thank You Davide Bortolini ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [November 29, 2016, 3:02pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/7 "2016-11-29T15:02:14Z")
Have either of you tried regenerating Ignition’s UA client certificate and then restarting the UA module or gateway? ---
**Author:** ![Sammy5](https://avatars.discourse-cdn.com/v4/letter/s/ac91a4/32.png) [@Sammy5](https://forum.inductiveautomation.com/u/Sammy5)\ **Post date:** [December 8, 2016, 8:04pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/8 "2016-12-08T20:04:59Z")
After upgrade to v6 I had the same issue, but to get this working on a couple of Ignition installations, re-issuing new certificates was not required. What was required was to remove the old Ignition certificates in Kepware OPC UA configuration and restart Kepware (not reinitialize). Then after Kepware restarted, I imported in the same Ignition certs and re-started Kepware again. Afterwards the connection to Kepware no longer faulted, and “Bad\_SecurityChecksFailed” no longer appeared. ---
**Author:** ![dbortolini](https://avatars.discourse-cdn.com/v4/letter/d/3e96dc/32.png) [@dbortolini](https://forum.inductiveautomation.com/u/dbortolini)\ **Post date:** [December 12, 2016, 12:10pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/9 "2016-12-12T12:10:07Z")
I have tried both uour suggestions (re-issue certs and remove/add certs to Kepware) but no way to get Ignition and Kepware 6 working with secure channel. Any ideas? Thank you Davide Bortolini ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [December 12, 2016, 4:08pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/10 "2016-12-12T16:08:05Z")
[quote=“dbortolini”]I have tried both uour suggestions (re-issue certs and remove/add certs to Kepware) but no way to get Ignition and Kepware 6 working with secure channel. Any ideas? Thank you Davide Bortolini[/quote] At the moment there’s nothing more that can be done on the Ignition side. Our support team is now working directly with Kepware to figure out what is going on. ---
**Author:** ![dbortolini](https://avatars.discourse-cdn.com/v4/letter/d/3e96dc/32.png) [@dbortolini](https://forum.inductiveautomation.com/u/dbortolini)\ **Post date:** [December 20, 2016, 10:13pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/11 "2016-12-20T22:13:56Z")
Solved with Inductive support team! The guy pointed me to the right solution. Thank you Ticket id #41142 Davide Bortolini ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [December 20, 2016, 10:23pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/12 "2016-12-20T22:23:32Z")
[quote=“dbortolini”]Solved with Inductive support team! The guy pointed me to the right solution. Thank you Ticket id #41142 Davide Bortolini[/quote] For the rest of you who can’t see his ticket… You need to go into Kepware and re-issue its server certificate(s), then restart Kepware (not just re-initialize), and then you may also have to edit/save the connection in Ignition. It sounds like Kepware will be addressing this in their next release. ---
**Author:** ![Mac](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mac/32/3283_2.png) [@Mac](https://forum.inductiveautomation.com/u/Mac)\ **Post date:** [February 16, 2017, 11:39pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/13 "2017-02-16T23:39:37Z")
I just went through this myself - Kepware said that its a bug in 6.0, the first time 6.0 generates the certs it mangles them somehow, so you have to delete them, reinit (I didnt have to shut it down) recreate them and trust them again. Works fine after that. Only happens this one time after a 6.0 installation or upgrade. FWIW, I had a similar issue when using thier own clock to a trigger - it would fail the first time it was called, worked the second time though. I sense a pattern… ---
**Author:** ![cmisztur2](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cmisztur2/32/4243_2.png) [@cmisztur2](https://forum.inductiveautomation.com/u/cmisztur2)\ **Post date:** [April 4, 2017, 2:16pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/14 "2017-04-04T14:16:40Z")
The only thing that fixed it for me was 7.9.1 🙂 ---
**Author:** ![Mac](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mac/32/3283_2.png) [@Mac](https://forum.inductiveautomation.com/u/Mac)\ **Post date:** [April 4, 2017, 3:17pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/15 "2017-04-04T15:17:31Z")
Kepware has admitted this is thier doing - so having 7.9.1 fix it must have been a coincidence. ---
**Author:** ![cmisztur2](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cmisztur2/32/4243_2.png) [@cmisztur2](https://forum.inductiveautomation.com/u/cmisztur2)\ **Post date:** [April 4, 2017, 3:32pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/16 "2017-04-04T15:32:14Z")
Hmmm interesting. I heard differently but won’t mention any names. ---
**Author:** ![Mac](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/mac/32/3283_2.png) [@Mac](https://forum.inductiveautomation.com/u/Mac)\ **Post date:** [April 4, 2017, 4:06pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/17 "2017-04-04T16:06:56Z")
Really? Please, details. Change names to protect the guilty but Kepware admitted to me that it was their problem but couldn’t definitively say why - if you have found otherwise I’d like to know. ---
**Author:** ![cmisztur2](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cmisztur2/32/4243_2.png) [@cmisztur2](https://forum.inductiveautomation.com/u/cmisztur2)\ **Post date:** [April 4, 2017, 4:48pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/18 "2017-04-04T16:48:57Z")
I really shouldn’t. But to me the recommendation was to upgrade to 7.9.1 and leave Kep at 6.0. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [April 4, 2017, 5:02pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/19 "2017-04-04T17:02:58Z")
Since we were unable to reproduce this in 7.9.0 and for the majority of customers it appeared to be an issue with KEPServer that could be resolved by regenerating the certificates, I can tell you that no changes or fixes specifically addressing this went into 7.9.1. That it’s suddenly working for you in 7.9.1 is some combination of mystery and coincidence ![:thumb_right:](https://us1.discourse-cdn.com/inductiveautomation/original/1X/2026e28c0c425034352c1b75807edf956adc75f4.gif ":thumb\_right:") ---
**Author:** ![cmisztur2](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cmisztur2/32/4243_2.png) [@cmisztur2](https://forum.inductiveautomation.com/u/cmisztur2)\ **Post date:** [April 4, 2017, 5:04pm UTC](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394/20 "2017-04-04T17:04:23Z")
I am glad both products are working together once again! [Next page](https://forum.inductiveautomation.com/t/kepserverex-6-0-broken/12394.md?page=2)