# OpcUa Client connect to ignition OPCUA

**URL:** <https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031>\
**Category:** Ignition\
**Created:** [September 24, 2020, 4:56pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031 "2020-09-24T16:56:02Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arnaud\_Declerck](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/arnaud_declerck/32/44872_2.png) [@Arnaud\_Declerck](https://forum.inductiveautomation.com/u/Arnaud_Declerck)\
**Post date:** [September 24, 2020, 4:56pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/1 "2020-09-24T16:56:02Z")

</div>

Hi, i'm trying to access the ignition opcUA through an opc client (UAExpert) and get the following error

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/2/2/22fd78838e944bf13d040b9d52fc7804cb2480b2.png)  
The certificate of UA is trusted in ignition and the ussername and password are set correctly into UAExpert.

Client and ignition are for the moment on the same machine and i'm using the local endpoint of ignition: opc.tcp://localhost:62541/discovery

Any help would be appreciated.

Regards

Arnaud

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 24, 2020, 5:01pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/2 "2020-09-24T17:01:28Z")

</div>

What version of Ignition and UaExpert are you using?

Are there any errors in the Ignition Gateway logs after you try to connect?

---

<div class="post-metadata">

**Author:** ![Arnaud\_Declerck](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/arnaud_declerck/32/44872_2.png) [@Arnaud\_Declerck](https://forum.inductiveautomation.com/u/Arnaud_Declerck)\
**Post date:** [September 24, 2020, 5:10pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/3 "2020-09-24T17:10:26Z")

</div>

Hi Kevin,

I'm using ignition 8.1.0-rc1 (b2020091420) and UAExpert 1.5.1 331

in ignition logs i have the following error:

| UascServerAsymmetricHandler | 24Sep2020 19:09:09 | Error installing security token: StatusCode{name=Bad\_SecurityChecksFailed, value=0x80130000, quality=bad} |
| --- | --- | --- |
| org.eclipse.milo.opcua.stack.core.UaException: no matching endpoint found: transportProfile=TCP\_UASC\_UABINARY, endpointUrl=opc.tcp://localhost:62541/discovery, securityPolicy=Basic256Sha256, securityMode=SignAndEncrypt | | |
| at org.eclipse.milo.opcua.stack.server.transport.uasc.UascServerAsymmetricHandler.lambda$openSecureChannel$3(UascServerAsymmetricHandler.java:407) | | |
| at java.base/java.util.Optional.orElseThrow(Unknown Source) | | |
| at org.eclipse.milo.opcua.stack.server.transport.uasc.UascServerAsymmetricHandler.openSecureChannel(UascServerAsymmetricHandler.java:397) | | |
| at org.eclipse.milo.opcua.stack.server.transport.uasc.UascServerAsymmetricHandler.lambda$sendOpenSecureChannelResponse$1(UascServerAsymmetricHandler.java:301) | | |
| at org.eclipse.milo.opcua.stack.core.channel.SerializationQueue.lambda$encode$0(SerializationQueue.java:57) | | |
| at org.eclipse.milo.opcua.stack.core.util.ExecutionQueue$Task.run(ExecutionQueue.java:119) | | |
| at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) | | |
| at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) | | |
| at java.base/java.lang.Thread.run(Unknown Source) | | |

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 24, 2020, 5:12pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/4 "2020-09-24T17:12:24Z")

</div>

Try removing the “/discovery” from the endpoint URL in UaExpert. You an right-click and go to Properties… on the server entry.

---

<div class="post-metadata">

**Author:** ![Arnaud\_Declerck](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/arnaud_declerck/32/44872_2.png) [@Arnaud\_Declerck](https://forum.inductiveautomation.com/u/Arnaud_Declerck)\
**Post date:** [September 24, 2020, 5:20pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/5 "2020-09-24T17:20:19Z")

</div>

when doing this, i get the same error into the log but is get the following into UAExpert:

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/7/17057d4bef3e932029fb3c7fe34edb9b67b10d8b.png)

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 24, 2020, 5:23pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/6 "2020-09-24T17:23:38Z")

</div>

So your server settings look like this (except with localhost instead)?

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/8/181f73049d70bbfeb775b31e5ac941e5d807ba2f.png)

I’m not sure what’s going wrong. If it’s really the exact same error message it means UaExpert is using the wrong endpoint URL, but I have the same version and it works fine.

For me, I use the /discovery URL during the custom discovery step in UaExpert, select an endpoint, then it adds the server entry into the tree on the left without the /discovery suffix, as it should, because the endpoints presented in the discovery use a different URL.

---

<div class="post-metadata">

**Author:** ![Arnaud\_Declerck](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/arnaud_declerck/32/44872_2.png) [@Arnaud\_Declerck](https://forum.inductiveautomation.com/u/Arnaud_Declerck)\
**Post date:** [September 24, 2020, 5:28pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/7 "2020-09-24T17:28:47Z")

</div>

Yes also i'm in trial version of ignition can this be an issues?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 24, 2020, 5:28pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/8 "2020-09-24T17:28:58Z")

</div>

Shouldn’t be an issue.

---

<div class="post-metadata">

**Author:** ![Arnaud\_Declerck](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/arnaud_declerck/32/44872_2.png) [@Arnaud\_Declerck](https://forum.inductiveautomation.com/u/Arnaud_Declerck)\
**Post date:** [September 24, 2020, 5:42pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/9 "2020-09-24T17:42:33Z")

</div>

Well, really strange.  
When entering the server data manually it doesn't work. when using the discovery like you did it's working.

thanks for your help Kevin

Regards

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 24, 2020, 5:58pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/10 "2020-09-24T17:58:33Z")

</div>

Seems to be a bug in UaExpert. I cannot get it to connect when using the advanced configuration instead of discovery either. In either variation of the endpoint URL it attempts to connect with some incorrect detail.

---

<div class="post-metadata">

**Author:** ![Arnaud\_Declerck](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/arnaud_declerck/32/44872_2.png) [@Arnaud\_Declerck](https://forum.inductiveautomation.com/u/Arnaud_Declerck)\
**Post date:** [September 24, 2020, 6:06pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/11 "2020-09-24T18:06:13Z")

</div>

always good to know, i can move forward now

thanks

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [September 24, 2020, 10:19pm UTC](https://forum.inductiveautomation.com/t/opcua-client-connect-to-ignition-opcua/39031/12 "2020-09-24T22:19:12Z")

</div>

A post was split to a new topic: [OPC Tag Browser Not Working?](https://forum.inductiveautomation.com/t/opc-tag-browser-not-working/39051)
