# Opc.Ua.ServiceResultException: BadSecureChannelClosed

**URL:** <https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659>\
**Category:** Ignition\
**Tags:** opcua, ignition81\
**Created:** [November 15, 2024, 12:41pm UTC](https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659 "2024-11-15T12:41:20Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sebastian\_coor](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sebastian\_coor](https://forum.inductiveautomation.com/u/Sebastian_coor)\
**Post date:** [November 15, 2024, 12:41pm UTC](https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659/1 "2024-11-15T12:41:20Z")

</div>

Hi!

We are connecting another software to Ignition trough opc-ua where Ignition is the OPC server. I am connecting to Ignition but cant see any tags and on the diagnostics side of the server there is no subscription for this connection. No error logs on the Ignition logs. On the other software I get the following error:

the secure channel has been closed on the target server.  
UA Data Source certificate might not be trusted on the target server.  
Please review OPC UA server configuration.  
Remote side closed connection.

Opc.Ua.ServiceResultException: BadSecureChannelClosed

On wireshark I can see that Ignition sends [FIN,ACK] after hellos message from the other software.

Same behavior if i connect to opc.tcp://host:port/discovery and to opc.tcp://host:port with the same result

If we refresh the runtime of the other software then we succed to read tags, but this needs to be done manually everytime we do a connection

picture of wireshark

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/3/43a31f348ae9b8692452f35bbe9c1629ee453495.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 15, 2024, 1:15pm UTC](https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659/2 "2024-11-15T13:15:13Z")

</div>

Can you share the actual capture file? Preferably containing multiple connection attempts over a period of time.

You could be hitting the connection rate limiter if your client is attempting to connect too often. Search for "RateLimitingHandler" and set the level to DEBUG: [Diagnostics - Logs | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/platform/gateway/status/diagnostics-logs#changing-logging-levels)

---

<div class="post-metadata">

**Author:** ![Sebastian\_coor](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sebastian\_coor](https://forum.inductiveautomation.com/u/Sebastian_coor)\
**Post date:** [November 18, 2024, 2:30pm UTC](https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659/3 "2024-11-18T14:30:49Z")

</div>

@Kevin.Herron I attached the wrapper and the wireshark capture but it seems like you are on the right spot  
[wrapper.log](https://forum.inductiveautomation.com/uploads/short-url/iVs6ty93gKrFRZ1MSMr7vrI33La.log) (2.7 MB)  
[wiresharkTest.pcapng](https://forum.inductiveautomation.com/uploads/short-url/oHAc0RsgkSp5lY8ybIu1TEo8s3X.pcapng) (332.8 KB)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 18, 2024, 2:32pm UTC](https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659/4 "2024-11-18T14:32:21Z")

</div>

Yep... that's what it is.

There's no configuration for this right now. Chill your client out. The rate limiter only kicks in if you're trying to connect more than 4 times per second.

---

<div class="post-metadata">

**Author:** ![Sebastian\_coor](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sebastian\_coor](https://forum.inductiveautomation.com/u/Sebastian_coor)\
**Post date:** [November 19, 2024, 10:02am UTC](https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659/5 "2024-11-19T10:02:21Z")

</div>

@Kevin.Herron is that limit for 1 client or all clients?

All clients in the fraction of a time?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 19, 2024, 12:56pm UTC](https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659/6 "2024-11-19T12:56:27Z")

</div>

It’s by IP address

---

<div class="post-metadata">

**Author:** ![Sebastian\_coor](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sebastian\_coor](https://forum.inductiveautomation.com/u/Sebastian_coor)\
**Post date:** [November 25, 2024, 8:44am UTC](https://forum.inductiveautomation.com/t/opc-ua-serviceresultexception-badsecurechannelclosed/98659/7 "2024-11-25T08:44:53Z")

</div>

thanks a lot for your help Kevin!
