# OPC-UA Connection between Ignition and Wincc

**URL:** <https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779>\
**Category:** Ignition\
**Created:** [January 30, 2021, 11:43am UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779 "2021-01-30T11:43:50Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![SaravanaKumar.S2](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@SaravanaKumar.S2](https://forum.inductiveautomation.com/u/SaravanaKumar.S2)\
**Post date:** [January 30, 2021, 11:43am UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779/1 "2021-01-30T11:43:50Z")

</div>

Hello @Kevin.Herron, Can you please help with this issue.

We are trying to establish the OPC-UA connection between Ignition gateway and Siemens PCS7 v9.0.

Got the error **Bad\_SecurityChecksFailed**.

Attached the error log.[error.txt](https://forum.inductiveautomation.com/uploads/short-url/z5OjYrOtNmWCLqjc8PaWtHt2F6q.txt) (2.2 KB)

Can anyone help me with the error message?

**Ignition OPC configuration:**

Security policy: Basic256sha256  
Security mode: Sign&Encrypt

Ignition has accepted the certificate from siemens wincc.

**Siemens side configuration**

Security policy: Basic256sha256  
Security mode: Sign&Encrypt

Since there is no option to accept the ignition client certificate, we have copied to the specific location in the siemens server.

**Server endpoint selection:**

 ![Server details](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/b/0b4d430cc5ac4e4527e7154bade29acd03b4ad53.png)

**Certificate trusted**

 ![Certificate trusted](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/d/5d6d71cc89d81fc2005910f2f432893f979260c5.png)

**Connection error**

 ![Connection error](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/7/178599916dedec38eabc4baa4a23f7558cf17d15.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 1, 2021, 2:08pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779/2 "2021-02-01T14:08:50Z")

</div>

It looks like you’ve done all the things you’re supposed to do and WinCC is still sending back the Bad\_SecurityChecksFailed error. You’ll probably have to contact Siemens support if you can’t figure out how to get more information about why.

---

<div class="post-metadata">

**Author:** ![SaravanaKumar.S2](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@SaravanaKumar.S2](https://forum.inductiveautomation.com/u/SaravanaKumar.S2)\
**Post date:** [February 1, 2021, 6:47pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779/3 "2021-02-01T18:47:02Z")

</div>

Hello @Kevin.Herron,

Thanks for the reply

Have you checked the error log attached?

[error.txt](https://forum.inductiveautomation.com/uploads/short-url/z5OjYrOtNmWCLqjc8PaWtHt2F6q.txt) (2.2 KB)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [February 1, 2021, 6:47pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779/4 "2021-02-01T18:47:49Z")

</div>

Yes, the error is how I know it’s coming from the server and not being generated client side.

---

<div class="post-metadata">

**Author:** ![SaravanaKumar.S2](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@SaravanaKumar.S2](https://forum.inductiveautomation.com/u/SaravanaKumar.S2)\
**Post date:** [February 1, 2021, 6:49pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779/5 "2021-02-01T18:49:50Z")

</div>

Thanks, @Kevin.Herron,

Suspected the same. Raised a request with siemens.

---

<div class="post-metadata">

**Author:** ![zxcslo](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/zxcslo/32/61610_2.png) [@zxcslo](https://forum.inductiveautomation.com/u/zxcslo)\
**Post date:** [February 1, 2021, 7:41pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779/6 "2021-02-01T19:41:49Z")

</div>

Have you tried completely compile the PCS7 project and downloading it again?

---

<div class="post-metadata">

**Author:** ![SaravanaKumar.S2](https://avatars.discourse-cdn.com/v4/letter/s/8edcca/32.png) [@SaravanaKumar.S2](https://forum.inductiveautomation.com/u/SaravanaKumar.S2)\
**Post date:** [March 1, 2021, 12:49pm UTC](https://forum.inductiveautomation.com/t/opc-ua-connection-between-ignition-and-wincc/42779/7 "2021-03-01T12:49:12Z")

</div>

Hello all,

We are able to rectify the issue. We found there are 2 root causes

1. Wincc connectivity pack license not available
2. OPC-UA client (ignition) should authenticate against the windows credentials of WinCC station.

Thanks for your support!

Regards,  
Saravanan.
