# OPC UA Security

**URL:** <https://forum.inductiveautomation.com/t/opc-ua-security/87902>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [March 26, 2024, 3:06pm UTC](https://forum.inductiveautomation.com/t/opc-ua-security/87902 "2024-03-26T15:06:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anton\_van\_der\_Avoird](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/anton_van_der_avoird/32/60034_2.png) [@Anton\_van\_der\_Avoird](https://forum.inductiveautomation.com/u/Anton_van_der_Avoird)\
**Post date:** [March 26, 2024, 3:06pm UTC](https://forum.inductiveautomation.com/t/opc-ua-security/87902/1 "2024-03-26T15:06:22Z")

</div>

I'm new to Ignition and struggle with an OPC UA Security problem. Tried several OPC clients to connect to the Ignition OPC server. Only when i use "Basic256Sha256,None" as Security Policies i'm able to connect.

On the internet are some post's to find, but they all end up in the solution for Security Policies with _None_ active and that's not secure.

Everything is set according the manuals and certificates are available on both systems (client/server). The only connection that works is Ignition's own OPC UA client (loop back) based on localhost, hostname and IP-address. Bind address is set to 0.0.0.0 and Endpoint Addresses is set correctly. All other settings for the OPC module are from the default install inclusive the user name/password.

Tips are welcome, or is it really only possible with security policies on None.

Used Version: 8.1.38 (b2024030513)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [March 26, 2024, 3:17pm UTC](https://forum.inductiveautomation.com/t/opc-ua-security/87902/2 "2024-03-26T15:17:45Z")

</div>

> [@Anton\_van\_der\_Avoird](#):
>
> Tips are welcome, or is it really only possible with security policies on None.

Depends on the client. Some are broken, some work.

UaExpert works as long as you use the "Custom Discovery" option and don't just manually enter the endpoint information.

Kepware's UA client is broken, though they told me at the OPC interop event recently that they think it's fixed in the very latest release.

What clients are you using? Did you restart Ignition after making changes to the OPC UA server settings?

---

<div class="post-metadata">

**Author:** ![Anton\_van\_der\_Avoird](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/anton_van_der_avoird/32/60034_2.png) [@Anton\_van\_der\_Avoird](https://forum.inductiveautomation.com/u/Anton_van_der_Avoird)\
**Post date:** [March 27, 2024, 10:04am UTC](https://forum.inductiveautomation.com/t/opc-ua-security/87902/3 "2024-03-27T10:04:07Z")

</div>

Thanks for your answer.

I did restart on each change. That's how the None setting got active.

I used the following clients;

- KEPServerEnterprise v6.9.584.0
- Softing dataFEED OPC UA Client v2.20.0.23900
- Rockwell 6.21.00 (CPR 9 SR 12)