# OPC UA with Security Options None - None **URL:** \ **Category:** Ignition\ **Created:** [April 10, 2013, 11:09am UTC](https://forum.inductiveautomation.com/t/opc-ua-with-security-options-none-none/6196 "2013-04-10T11:09:39Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![cacamille3](https://avatars.discourse-cdn.com/v4/letter/c/e19b73/32.png) [@cacamille3](https://forum.inductiveautomation.com/u/cacamille3)\ **Post date:** [April 10, 2013, 11:09am UTC](https://forum.inductiveautomation.com/t/opc-ua-with-security-options-none-none/6196/1 "2013-04-10T11:09:39Z")
Hello ! I have a question regarding OPC Connections with an OPC UA Server. I am able to have a Secure Connections with Security Options : Basic128Rsa15 - Sign&Encrypt and Basic256 - Sign. and with Anonymous or Credentials I have a problem with Security Option : None - None. with Anonymous and Credentials Your client send a CreateSesion Request to my Server with those Security Option. My Server send the CreateSessionResponse with StatusCode : Good but with the ServerCertificateField empty. Then your client Close immediately the SecureChannel. The OPC UA Specification 1.02 say “If the securityPolicyUri is NONE and none of the UserTokenPolicies requires encryption, the Server shall not send an ApplicationInstanceCertificate and the Client shall ignore the ApplicationInstanceCertificate.” So my question is : Is Ignition always looking for a Certificate in the ApplicationInstanceCertificate field of the CreateSessionResponse or is the error coming from something else ? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [April 10, 2013, 2:02pm UTC](https://forum.inductiveautomation.com/t/opc-ua-with-security-options-none-none/6196/2 "2013-04-10T14:02:07Z")
Can you find the “export logs” link in the Console area of the gateway, export those, and attach them to this post? Alternatively, if you can send me a copy of your OPC server, or expose it to the internet so I can connect somehow, I can try to troubleshoot it that way as well. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [April 10, 2013, 2:42pm UTC](https://forum.inductiveautomation.com/t/opc-ua-with-security-options-none-none/6196/3 "2013-04-10T14:42:34Z")
It does appear that I’m expecting the server certificate to be present, so maybe the logs won’t be necessary after all. I’ll have to do some work on the client to fix this. ---
**Author:** ![cacamille3](https://avatars.discourse-cdn.com/v4/letter/c/e19b73/32.png) [@cacamille3](https://forum.inductiveautomation.com/u/cacamille3)\ **Post date:** [April 10, 2013, 2:45pm UTC](https://forum.inductiveautomation.com/t/opc-ua-with-security-options-none-none/6196/4 "2013-04-10T14:45:35Z")
Ok. It is specified in 5.6.2.2 : server Certificate. Edit : I check. This is a new feature since the 1.01 require the Server send certificate with any Security Policy. With 1.02 the client shall not verify the Server Certificate if the Security Policy is None ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [April 10, 2013, 3:08pm UTC](https://forum.inductiveautomation.com/t/opc-ua-with-security-options-none-none/6196/5 "2013-04-10T15:08:57Z")
I’ve fixed this for our next release (Ignition 7.5.7, OPC-UA module 1.5.7). ---
**Author:** ![cacamille3](https://avatars.discourse-cdn.com/v4/letter/c/e19b73/32.png) [@cacamille3](https://forum.inductiveautomation.com/u/cacamille3)\ **Post date:** [April 10, 2013, 3:11pm UTC](https://forum.inductiveautomation.com/t/opc-ua-with-security-options-none-none/6196/6 "2013-04-10T15:11:29Z")
Ok. Thanks for the quick Fix. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [April 10, 2013, 3:15pm UTC](https://forum.inductiveautomation.com/t/opc-ua-with-security-options-none-none/6196/7 "2013-04-10T15:15:58Z")
No problem. Better now than at the interop in a couple weeks! 🙂