# Add Z-Wave device non-secure?

**URL:** <https://community.homey.app/t/add-z-wave-device-non-secure/12406>\
**Category:** Questions & Help\
**Tags:** z-wave\
**Created:** [April 28, 2019, 8:04pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406 "2019-04-28T20:04:18Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arnfinn\_Gilberg](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/arnfinn_gilberg/32/12805_2.png) [@Arnfinn\_Gilberg](https://community.homey.app/u/Arnfinn_Gilberg)\
**Post date:** [April 28, 2019, 8:04pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/1 "2019-04-28T20:04:18Z")

</div>

Hi.

Is there a way to “force” the Homey to include devices non-secure?  
I cannot find any way to choose secure/non-secure inclusion…

Arnfinn

---

<div class="post-metadata">

**Author:** ![Caseda](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/caseda/32/138695_2.png) [@Caseda](https://community.homey.app/u/Caseda)\
**Post date:** [April 28, 2019, 8:18pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/2 "2019-04-28T20:18:27Z")

</div>

if the the device itself gives no such option, then it is indeed not possible.  
But feel free to [request](https://go.athom.com/request-homey-feature) this feature, the more people do it, the faster it gets implemented.

---

<div class="post-metadata">

**Author:** ![Arnfinn\_Gilberg](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/arnfinn_gilberg/32/12805_2.png) [@Arnfinn\_Gilberg](https://community.homey.app/u/Arnfinn_Gilberg)\
**Post date:** [April 28, 2019, 8:32pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/3 "2019-04-28T20:32:49Z")

</div>

The device, Heatit TRM2fx thermostats can be included non-secure and secure.

---

<div class="post-metadata">

**Author:** ![Caseda](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/caseda/32/138695_2.png) [@Caseda](https://community.homey.app/u/Caseda)\
**Post date:** [April 28, 2019, 9:01pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/4 "2019-04-28T21:01:20Z")

</div>

If the device itself gives the option, then it will say in the (device) manual the difference on what to do to include secure or unsecure.

If that is not the case then the device itself just **doesn’t** support it, and it needs to come from the controller, then all secure devices are able to include unsecure.  
But as I said before, that is not implemented.

---

<div class="post-metadata">

**Author:** ![PetervdK](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/petervdk/32/20669_2.png) [@PetervdK](https://community.homey.app/u/PetervdK)\
**Post date:** [April 28, 2019, 9:11pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/5 "2019-04-28T21:11:26Z")

</div>

Like Caseda says, there should be explained in the manual how to do that.  
With Aeotec f.i. you can press the device button a 2nd time after you pressed it for including. The 2nd press will force adding it secure.

---

<div class="post-metadata">

**Author:** ![Caseda](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/caseda/32/138695_2.png) [@Caseda](https://community.homey.app/u/Caseda)\
**Post date:** [April 28, 2019, 9:50pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/6 "2019-04-28T21:50:11Z")

</div>

Curious where you got that information from.  
If a device is secure (and the controller can handle it) it will include secure no matter what, this is one of the rules the zwave alliance put into the secure protocol.  
You can only “force” unsecure inclusion.

---

<div class="post-metadata">

**Author:** ![Arnfinn\_Gilberg](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/arnfinn_gilberg/32/12805_2.png) [@Arnfinn\_Gilberg](https://community.homey.app/u/Arnfinn_Gilberg)\
**Post date:** [April 28, 2019, 9:56pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/7 "2019-04-28T21:56:01Z")

</div>

From my experience the thermostat plays along with what the controller says.

Ex 1: FutureHome (Norwegian) zwave hub, included secure with pin code on the thermostat typed in the app for this controller. Everything ok for 24h, then thermostat lost connection with hub.

Ex 2: FutureHome (Norwegian) zwave hub, included NON-secure with the thermostat. Everything ok for several weeks (until I bought Homey Pro).

Ex 3: Homey Pro zwave hub, included secure withOUT pin code, I belive the thermostat told the Homey the twin, I did not type anything. Everything ok for 12-36h, then thermostat lost connection with hub.

---

<div class="post-metadata">

**Author:** ![Caseda](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/caseda/32/138695_2.png) [@Caseda](https://community.homey.app/u/Caseda)\
**Post date:** [April 28, 2019, 10:01pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/8 "2019-04-28T22:01:10Z")

</div>

Homey does not support security v2 fully yet (the code you are referring to), so it is included as partial security v2 (acts then as security v1).

But as explained before, if is it not in the manual of the device (like aeotec has 2 different amount of z-button pushes to include either secure or unsecure), you will have to contact athom to ask for that feature so homey then forces the inclusion of the device as unsecure.  
Or let them fix the issue of losing the connection after some time.

---

<div class="post-metadata">

**Author:** ![PetervdK](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/petervdk/32/20669_2.png) [@PetervdK](https://community.homey.app/u/PetervdK)\
**Post date:** [April 28, 2019, 10:07pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/9 "2019-04-28T22:07:47Z")

</div>

You’re right, I meant with Aeotec, not Fibaro. Mixed some things up.  
But it is like i mentioned, 1 press for non-secure (standard), 2 press for secure.

---

<div class="post-metadata">

**Author:** ![ktd](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ktd/32/11761_2.png) [@ktd](https://community.homey.app/u/ktd)\
**Post date:** [September 28, 2019, 2:56pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/10 "2019-09-28T14:56:07Z")

</div>

I just downloaded the Telldus app from GitHub and added `"includeSecure": false,` and insalled the app with CLI.  
So now my Telldus Mini plugs are non secure. Will see if I can do the same with the Fibaro app. I have one plug and one Dimmer 2.

![wave](https://us1.discourse-cdn.com/flex025/uploads/athom/original/2X/3/363de2d12df3fc1b6f4b6c2346c855b81dafe72a.png)  
These devices are both a Telldus Mini plugs. I have only readded one of them.

---

<div class="post-metadata">

**Author:** ![ktd](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ktd/32/11761_2.png) [@ktd](https://community.homey.app/u/ktd)\
**Post date:** [September 28, 2019, 4:09pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/11 "2019-09-28T16:09:48Z")

</div>

Did the same thing with the Fibaro app. Now I only have my Danalock as secure, which also should be secure. 🙂

![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/2X/0/0f46374a4a985e1974081c36e874d8224ebd6c17.jpeg)

---

<div class="post-metadata">

**Author:** ![PetervdK](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/petervdk/32/20669_2.png) [@PetervdK](https://community.homey.app/u/PetervdK)\
**Post date:** [September 28, 2019, 6:16pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/12 "2019-09-28T18:16:34Z")

</div>

Where should that be added? Maybe i will try to do this with my V2 Coolcam plugs. The new versions automatically add as secure and i don’t want that…

---

<div class="post-metadata">

**Author:** ![ktd](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ktd/32/11761_2.png) [@ktd](https://community.homey.app/u/ktd)\
**Post date:** [September 28, 2019, 6:34pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/13 "2019-09-28T18:34:46Z")

</div>

I have added the line above the

> “zwaveAllianceProductId”:[xxxx],

It seems to vary in what file that line is from app to app.

---

<div class="post-metadata">

**Author:** ![TedTolboom](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/tedtolboom/32/12081_2.png) [@TedTolboom](https://community.homey.app/u/TedTolboom)\
**Post date:** [September 28, 2019, 6:52pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/14 "2019-09-28T18:52:57Z")

</div>

Should be in the Z-wave object; position is not relevant. Have updated the Heatit app to resolve the issues with S2 security…

---

<div class="post-metadata">

**Author:** ![ktd](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ktd/32/11761_2.png) [@ktd](https://community.homey.app/u/ktd)\
**Post date:** [September 28, 2019, 7:18pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/15 "2019-09-28T19:18:20Z")

</div>

Ok. I looked how Athom did it for sensors in their Fibaro app. Guess that if you have devices that should be added as secure and non secure you have to add the line for each different device?  
I don’t know much about this so please, be gentle in your reply if I’m wrong. 😉

---

<div class="post-metadata">

**Author:** ![Le\_Cactus](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/le_cactus/32/9727_2.png) [@Le\_Cactus](https://community.homey.app/u/Le_Cactus)\
**Post date:** [October 5, 2019, 3:22pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/16 "2019-10-05T15:22:20Z")

</div>

Thank you _so_ much. After doing this for the FGT-001 (Fibaro Heat Controlers) they finally stay online. While included as secure device they would go offline all the time. Now when I added them as unsecure devices they work as they should.

---

<div class="post-metadata">

**Author:** ![PetervdK](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/petervdk/32/20669_2.png) [@PetervdK](https://community.homey.app/u/PetervdK)\
**Post date:** [October 6, 2019, 7:35pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/17 "2019-10-06T19:35:23Z")

</div>

I tried this “trick” in the Neo Coolcam app and it works fine. Now the new V2 plugs are added as unsecured instead of secure. They are much more reliable now and generate way less communication.

In the file **app.json** I added “ **“includeSecure”: false,** ” under the the **“id”: “NAS-WR01ZE”,** section just before the line with “learnmode”:

 ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/d/d/ddb6cddccc2ac37d16c1218b715e5f8b3b43516a.png)

---

<div class="post-metadata">

**Author:** ![Trygve\_Ryslett](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/trygve_ryslett/32/13117_2.png) [@Trygve\_Ryslett](https://community.homey.app/u/Trygve_Ryslett)\
**Post date:** [October 10, 2019, 4:11am UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/18 "2019-10-10T04:11:43Z")

</div>

How you do non secure with these?

---

<div class="post-metadata">

**Author:** ![Ulf\_Safstrand](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ulf_safstrand/32/8495_2.png) [@Ulf\_Safstrand](https://community.homey.app/u/Ulf_Safstrand)\
**Post date:** [October 10, 2019, 11:20am UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/19 "2019-10-10T11:20:10Z")

</div>

Do anyone have an instruction on how to modify fx the Telldus app to accept non secure communications?  
I am not a programmer and know very little about CLI… 🙂

---

<div class="post-metadata">

**Author:** ![ktd](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ktd/32/11761_2.png) [@ktd](https://community.homey.app/u/ktd)\
**Post date:** [October 10, 2019, 5:48pm UTC](https://community.homey.app/t/add-z-wave-device-non-secure/12406/20 "2019-10-10T17:48:35Z")

</div>

1. Go to [GitHub](https://github.com/yhaugom/com.telldus) and download the project (Clone or download -\> Download ZIP).  

2. Unzip the downloaded project and open app.json in a text editor. I use [Atom](https://atom.io).

3. At line 481, add `"includeSecure": false,`.

4. For the installation of your modification, follow the excellent [guide](https://community.homey.app/t/how-to-cli-install-method/198) from @HansieNL.

Good luck and ask if you need/want more info.

**EDIT** This instructions is for the Telldus mini. If you need to include another device as non secure, make the modification in the same file but in the section in the file for that specific device.

[Next page](https://community.homey.app/t/add-z-wave-device-non-secure/12406.md?page=2)
