# Upgrade 7.9.12 -\> 7.9.13 : Opc Connection faulted **URL:** \ **Category:** Ignition\ **Tags:** ignition79\ **Created:** [December 23, 2019, 2:19pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901 "2019-12-23T14:19:18Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![y.pfister](https://avatars.discourse-cdn.com/v4/letter/y/7cd45c/32.png) [@y.pfister](https://forum.inductiveautomation.com/u/y.pfister)\ **Post date:** [December 23, 2019, 2:19pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/1 "2019-12-23T14:19:18Z")
I’ve updated Ignition to version 7.9.13. But I can no longer connect to Beckhoff UA OPC servers. I have the following error: **nonce must be at least 32 bytes** ```auto UaException: status=Bad_NonceInvalid, message=nonce must be at least 32 bytes at org.eclipse.milo.opcua.stack.core.util.NonceUtil.validateNonce(NonceUtil.java:176) at org.eclipse.milo.opcua.stack.core.util.NonceUtil.validateNonce(NonceUtil.java:162) at org.eclipse.milo.opcua.sdk.client.session.SessionFsmFactory.activateSession(SessionFsmFactory.java:878) at org.eclipse.milo.opcua.sdk.client.session.SessionFsmFactory.lambda$configureActivatingState$17(SessionFsmFactory.java:345) at com.digitalpetri.strictmachine.dsl.ActionBuilder$PredicatedTransitionAction.execute(ActionBuilder.java:76) at com.digitalpetri.strictmachine.StrictMachine$PollAndEvaluate.lambda$run$0(StrictMachine.java:207) at java.util.ArrayList.forEach(Unknown Source) at com.digitalpetri.strictmachine.StrictMachine$PollAndEvaluate.run(StrictMachine.java:198) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) 7.9.13 (b2019120915) Oracle Corporation 1.8.0_191 ``` Are there any ideas as to what the problem could be? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [December 23, 2019, 2:21pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/2 "2019-12-23T14:21:09Z")
You’ll have to change the connection to use security for now. An update to the OPC UA library included strict nonce validation and the Beckhoff server is sending an invalid nonce back according to the OPC UA spec. I’m going to relax this check under certain circumstances in a subsequent update, but for now all you can do is switch to using security for the connection or go back to Ignition 7.9.12. ---
**Author:** ![witman](https://avatars.discourse-cdn.com/v4/letter/w/d2c977/32.png) [@witman](https://forum.inductiveautomation.com/u/witman)\ **Post date:** [December 23, 2019, 3:28pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/3 "2019-12-23T15:28:20Z")
Alternatively, update the Beckhoff OPC UA servers (current versions don’t cause this issue; older ones do). But switching them to use security is a quick fix, and probably not a bad idea anyway. You just have to accept the certificates from Ignition in the Beckhoff OPC UA Configurator after switching to an encrypted endpoint (which is enabled by default on the Beckhoff OPC UA server). ---
**Author:** ![y.pfister](https://avatars.discourse-cdn.com/v4/letter/y/7cd45c/32.png) [@y.pfister](https://forum.inductiveautomation.com/u/y.pfister)\ **Post date:** [December 24, 2019, 11:07pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/4 "2019-12-24T23:07:17Z")
Thank you very much. The problem is solved with the option: SecurityPolicy: Basic128Rsa15, MessageSecurity: SignAndEncrypt Merry Christmas 😀 ---
**Author:** ![edm](https://avatars.discourse-cdn.com/v4/letter/e/f08c70/32.png) [@edm](https://forum.inductiveautomation.com/u/edm)\ **Post date:** [January 8, 2020, 2:25pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/5 "2020-01-08T14:25:30Z")
+1 on relaxing the check, I have a Beijer HMI panel which doesn’t support encryption with the same problem, have to downgrade to 7.9.12. ---
**Author:** ![dstauft](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dstauft/32/6796_2.png) [@dstauft](https://forum.inductiveautomation.com/u/dstauft)\ **Post date:** [January 8, 2020, 4:43pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/6 "2020-01-08T16:43:43Z")
Yup, same issue here… We are using unsecure connections to a vendor supplied OPC server that we can’t configure security on. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [January 8, 2020, 4:51pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/7 "2020-01-08T16:51:50Z")
I don’t think we’re doing nightly builds in 7.9 so I think staying on 7.9.12 is the only solution for now. 7.9.14 will include a relaxed nonce validation for these non compliant servers. I’m hoping to get it into an 8.0.8 nightly build in the next day or so. ---
**Author:** ![dstauft](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dstauft/32/6796_2.png) [@dstauft](https://forum.inductiveautomation.com/u/dstauft)\ **Post date:** [January 8, 2020, 5:23pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/8 "2020-01-08T17:23:04Z")
Kevin, we are on 8.0.6 in our dev environment with no OPC connection issues - will 8.0.7 break the connections or will 8.0.8? Not sure what you meant by “Hoping to get it into an 8.0.8 build” - get the security in or the relaxed nonce validation? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [January 8, 2020, 5:57pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/9 "2020-01-08T17:57:17Z")
The stricter nonce validation that caused this issue is in 8.0.7 I believe, if not already in 8.0.6. The relaxed nonce validation will go into an 8.0.8 nightly build. This is only an issue with certain 3rd party servers when no security is used. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [January 9, 2020, 9:31pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/10 "2020-01-09T21:31:13Z")
The relaxed nonce validation should land in tomorrow’s 8.0.8 nightly build. It will eventually be part of 7.9.14 as well. ---
**Author:** ![jespinmartin1](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jespinmartin1/32/57175_2.png) [@jespinmartin1](https://forum.inductiveautomation.com/u/jespinmartin1)\ **Post date:** [February 3, 2020, 10:25pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/11 "2020-02-03T22:25:23Z")
I was on 8.0.6 and upgrade to .7. This made my OPC Connections Faulted ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [February 3, 2020, 10:34pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/12 "2020-02-03T22:34:30Z")
Go back to 8.0.6 or go forward to the nightly. ---
**Author:** ![edvin](https://avatars.discourse-cdn.com/v4/letter/e/96bed5/32.png) [@edvin](https://forum.inductiveautomation.com/u/edvin)\ **Post date:** [April 29, 2020, 6:06am UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/13 "2020-04-29T06:06:01Z")
Resurrecting this thread, I can’t tell from the release notes, is this issue now fixed in 7.9.14? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [April 29, 2020, 12:46pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/14 "2020-04-29T12:46:17Z")
Yes, not sure why it doesn’t have a change log entry. ---
**Author:** ![Kleppe85](https://avatars.discourse-cdn.com/v4/letter/k/c4cdca/32.png) [@Kleppe85](https://forum.inductiveautomation.com/u/Kleppe85)\ **Post date:** [September 4, 2020, 10:32am UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/15 "2020-09-04T10:32:14Z")
Should it be possible to connect to a OPC UA -server with no encryption with Ignition 8.0.16? Im getting the same error as mentioned above. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [September 4, 2020, 12:23pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/16 "2020-09-04T12:23:19Z")
Yes, it should be under most circumstances. Are you trying to use a username and password with no security? ---
**Author:** ![Kleppe85](https://avatars.discourse-cdn.com/v4/letter/k/c4cdca/32.png) [@Kleppe85](https://forum.inductiveautomation.com/u/Kleppe85)\ **Post date:** [September 9, 2020, 6:10am UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/17 "2020-09-09T06:10:20Z")
Correct, trying to connect to a Beijer iX Panel. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [September 9, 2020, 11:42am UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/18 "2020-09-09T11:42:54Z")
This configuration won’t work unless you get an update that fixed the nonce bug in the server. No security with anonymous identity should work, or using security should work. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [October 8, 2020, 11:53pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/19 "2020-10-08T23:53:52Z")
A post was split to a new topic: [Connecting to Beckhoff OPC UA](https://forum.inductiveautomation.com/t/connecting-to-beckhoff-opc-ua/39522) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [October 8, 2020, 11:55pm UTC](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901/20 "2020-10-08T23:55:28Z")
A post was merged into an existing topic: [Connecting to Beckhoff OPC UA](https://forum.inductiveautomation.com/t/connecting-to-beckhoff-opc-ua/39522/3) [Next page](https://forum.inductiveautomation.com/t/upgrade-7-9-12-7-9-13-opc-connection-faulted/30901.md?page=2)