# OPC UA Security Policy: Doesn't appear Basic256 option

**URL:** <https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249>\
**Category:** Ignition\
**Created:** [April 4, 2021, 6:10am UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249 "2021-04-04T06:10:23Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![ale.alcazar.m](https://avatars.discourse-cdn.com/v4/letter/a/d6d6ee/32.png) [@ale.alcazar.m](https://forum.inductiveautomation.com/u/ale.alcazar.m)\
**Post date:** [April 4, 2021, 6:10am UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249/1 "2021-04-04T06:10:23Z")

</div>

Hi there, when i create OPC UA server, the Security policy Basic 256 isn’t available, only appears basic128, its important to us to have the basic256 because of the excahnge of the certificates.  
Could you please help me?  
Regards ![ignition](https://us1.discourse-cdn.com/inductiveautomation/original/3X/b/2/b2c81acca8399db939f19da67bfc99abe122a4c6.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [April 4, 2021, 1:17pm UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249/2 "2021-04-04T13:17:25Z")

</div>

It looks like you’re making a connection to an Ignition OPC UA server from 7.9 or earlier. Versions before 8.0 did not allow the SecurityPolicy choices offered by the server to be configured.

---

<div class="post-metadata">

**Author:** ![xiaogang\_Ling](https://avatars.discourse-cdn.com/v4/letter/x/f05b48/32.png) [@xiaogang\_Ling](https://forum.inductiveautomation.com/u/xiaogang_Ling)\
**Post date:** [March 27, 2024, 9:02am UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249/3 "2024-03-27T09:02:01Z")

</div>

Hi Kevin:  
This configuration can work with Ignition 7.9  
Alogrithm : SHA1  
Security basic 256  
Security mode: Sign & Encypt  
But SHA2 is not allowed in Ignition 7.9 Right?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [March 27, 2024, 12:06pm UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249/4 "2024-03-27T12:06:36Z")

</div>

> [@xiaogang\_Ling](#):
>
> But SHA2 is not allowed in Ignition 7.9 Right?

Correct, the "Basic256" profile should be supported, but the newer "Basic256Sha256" profile is not supported.

Ignition 8.1 supports all of these, as well as the newer Aes128\_Sha256\_RsaOaep and Aes256\_Sha256\_RsaPss profiles.

---

<div class="post-metadata">

**Author:** ![xiaogang\_Ling](https://avatars.discourse-cdn.com/v4/letter/x/f05b48/32.png) [@xiaogang\_Ling](https://forum.inductiveautomation.com/u/xiaogang_Ling)\
**Post date:** [March 28, 2024, 3:50am UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249/5 "2024-03-28T03:50:29Z")

</div>

Thanks for your reply.  
For ignition 7.9  
I've tried Basic256 with Siemens and Beckhoff.  
Siemens support SHA1, can connect.  
Beckhoff only support SHA2, can not connect.  
Is that because of difference between SHA1 and SHA2 ?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [March 28, 2024, 10:48am UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249/6 "2024-03-28T10:48:18Z")

</div>

> [@xiaogang\_Ling](#):
>
> Beckhoff only support SHA2, can not connect.  
> Is that because of difference between SHA1 and SHA2 ?

Yes, seems likely. They are two different security policies.

---

<div class="post-metadata">

**Author:** ![xiaogang\_Ling](https://avatars.discourse-cdn.com/v4/letter/x/f05b48/32.png) [@xiaogang\_Ling](https://forum.inductiveautomation.com/u/xiaogang_Ling)\
**Post date:** [April 2, 2024, 7:58am UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249/7 "2024-04-02T07:58:56Z")

</div>

Does ignition 8.1 only support SHA1 Hash Algorithm of sinature ?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [April 2, 2024, 10:45am UTC](https://forum.inductiveautomation.com/t/opc-ua-security-policy-doesnt-appear-basic256-option/45249/8 "2024-04-02T10:45:45Z")

</div>

See Kevin's comment six days ago. v7.9 is the version that only supports SHA1.
