# Enabling OPC-UA Username Authentication on the BC100 FW3

**URL:** <https://www.wago.community/t/enabling-opc-ua-username-authentication-on-the-bc100-fw3/968>\
**Category:** CODESYS\
**Created:** [May 17, 2024, 7:49pm UTC](https://www.wago.community/t/enabling-opc-ua-username-authentication-on-the-bc100-fw3/968 "2024-05-17T19:49:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![JohnDitter](https://sea2.discourse-cdn.com/flex016/user_avatar/www.wago.community/johnditter/32/68_2.png) [@JohnDitter](https://www.wago.community/u/JohnDitter)\
**Post date:** [May 17, 2024, 7:49pm UTC](https://www.wago.community/t/enabling-opc-ua-username-authentication-on-the-bc100-fw3/968/1 "2024-05-17T19:49:50Z")

</div>

With firmware revision 3, the Basic Controller 100 now supports OPC UA. However, this version does not support Anonymous logon like some other WAGO controllers.

Additionally, plain text username/password authentication is disabled by default, which may give the impression that simple authentication is not functioning. To enable it, click on the “Security Settings…” menu item under “Communication Settings… Device”.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/wago/original/1X/0acfe0cdff611651baf524a44d2cae13bb96b7ef.png)

Set “Communication Mode” to **All** and “AllowUserPasswordwordOnPlainText” to **YES**. Then Click **OK**. Cycle power on the controller for it to take effect.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/wago/original/1X/fc5ed3684396183a2373afb18f223a669828afdb.png)

Now, an OPC-UA client can log on using the CODESYS username and password.  
For example, UA Expert client.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/wago/original/1X/275a8c6a0763b6fbb12c287b2993915679620f7c.jpeg)

---

<div class="post-metadata">

**Author:** ![WagoIcard](https://sea2.discourse-cdn.com/flex016/user_avatar/www.wago.community/wagoicard/32/1508_2.png) [@WagoIcard](https://www.wago.community/u/WagoIcard)\
**Post date:** [May 20, 2024, 12:16am UTC](https://www.wago.community/t/enabling-opc-ua-username-authentication-on-the-bc100-fw3/968/2 "2024-05-20T00:16:28Z")

</div>

Nice but does the plain text mean the admin password is free to read on the network ?

---

<div class="post-metadata">

**Author:** ![JohnDitter](https://sea2.discourse-cdn.com/flex016/user_avatar/www.wago.community/johnditter/32/68_2.png) [@JohnDitter](https://www.wago.community/u/JohnDitter)\
**Post date:** [May 20, 2024, 3:37pm UTC](https://www.wago.community/t/enabling-opc-ua-username-authentication-on-the-bc100-fw3/968/3 "2024-05-20T15:37:57Z")

</div>

Correct, that’s true for all WAGO controllers. I think the BC100 FW3 is the first controller to disable “AllowUserPasswordwordOnPlainText” by default. This method should only be used on a secure/private network. Otherwise, you should use certificates for authentication and encryption. I tested certificates on the BC100 and they work too – it’s just a little more to setup.