---
title: Manage OPC UA Authentication
slug: bhdo-v1/manage-opc-ua-authentication
createdAt: 2022-09-26T16:07:07.000Z
---

You can configure authentication options for the OPC UA server by navigating to **OPC **>** Management**.

OPC UA server supports the following identity tokens for authentication:

- **Anonymous**: The server does not have user information and cannot identify them.
- **Certificate**: The server can identify users by security certificates generated by hash algorithms.
- **Password**: The server can identify users by their password.

You can enable multiple identity types and choose authentication options for them.

:::hint{type="warning"}
**Important**: 

- Choosing security policies for identity tokens ensures that the server encrypts authentication messages.
- Selections in the *Authentication Management *section must match the selections in the *Policies *section or the server will not start.
:::

# Select Security Policies

**To select security policies:**

1. Navigate to **OPC **> **Management**. 
2. From the *Management panel*, refer to the *Authentication management section* and click the **Enable **toggle next to one or more identity tokens: **Anonymous**, **Certificate**, and **Password**.

   ::Image[]{src="https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/UkWZpeaUcxJkHNZr0C4oQ_toggle-opcua-authentication.png" size="80" width="952" height="676" caption="The Authentication management section" position="center" showCaption="true"}
3. For each enabled token section, select check boxes for authentication options.
4. After enabling or disabling a policy, you must restart the OPC UA Server. See [Manage the OPC UA Server](docId\:p0hI_3Snb82jjd0MftpGg) to learn more.