# \[REQUEST\] User selectable Z-wave security levels in order for associations to work **URL:** \ **Category:** Ideas & Suggestions\ **Tags:** z-wave\ **Created:** [July 30, 2021, 3:26pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925 "2021-07-30T15:26:56Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![Thierry\_Sabatier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/thierry_sabatier/32/33929_2.png) [@Thierry\_Sabatier](https://community.homey.app/u/Thierry_Sabatier)\ **Post date:** [August 9, 2021, 5:00pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/21 "2021-08-09T17:00:51Z")
Yesssss! by entering a bad PIN (eg: 00000) during inclusion, the Fibaro “Roller Shutter3” is not in: “S2 Authenticated” but in unsecured mode !!! so I can create flows with Zwave: “send raw command”. Many thanks to @Da_JoJo for suggesting this workaround by entering the wrong PIN code ---
**Author:** ![Da\_JoJo](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/da_jojo/32/8210_2.png) [@Da\_JoJo](https://community.homey.app/u/Da_JoJo)\ **Post date:** [August 12, 2021, 7:24am UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/22 "2021-08-12T07:24:19Z")
Glad that worked. For the S2(unauthenticated) it’s not an option though. I haven’t looked at the driver-code , but is there a possibility to change the inclusion of S2(unauthenticated) to force S2(authenticated) and do the same security code trick ? ---
**Author:** ![Ryvaenge](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ryvaenge/32/13197_2.png) [@Ryvaenge](https://community.homey.app/u/Ryvaenge)\ **Post date:** [September 6, 2021, 2:44pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/23 "2021-09-06T14:44:58Z")
I have tried the new code with both “requireSecure”: true and false, changes nothing for my device (sunricher rebranded K8 remote) ---
**Author:** ![Edwin\_D](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/edwin_d/32/136417_2.png) [@Edwin\_D](https://community.homey.app/u/Edwin_D)\ **Post date:** [September 6, 2021, 5:14pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/24 "2021-09-06T17:14:45Z")
I tried it too, same result. You can only enforce secure for locks or similar, ut not force uncecure. As secure is the default that seems hardly useful. That would only be relevant if S2 inclusion failed and unsecure was attempted because S2 failed. Would have been great if false meant insecure, true meant force secure and unassigned meant default bahaviour. ---
**Author:** ![stianthorgaard](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/stianthorgaard/32/40957_2.png) [@stianthorgaard](https://community.homey.app/u/stianthorgaard)\ **Post date:** [October 12, 2021, 7:17am UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/25 "2021-10-12T07:17:20Z")
Associations are made completely useless after 7.0. Had a bunch of fibaro dimmers with direct associations to namron switches, and it worked all fine (and still does after 7.0). Just refurbished a bedroom, bought a dimmer and switch to but no Sir, not this time. I want the direct association to work, just in case the Homey breaks or fails. They should have implemented a choice for what security level you want to add components with BEFORE they messed it up. ---
**Author:** ![TagePP](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/tagepp/32/41036_2.png) [@TagePP](https://community.homey.app/u/TagePP)\ **Post date:** [October 25, 2021, 2:58pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/26 "2021-10-25T14:58:38Z")
Any feedback from Athom regarding this issue yet? Or maybe someone has come up with a working hack? ---
**Author:** ![JPe4619](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jpe4619/32/9017_2.png) [@JPe4619](https://community.homey.app/u/JPe4619)\ **Post date:** [October 25, 2021, 3:20pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/27 "2021-10-25T15:20:34Z")
> [@Ryvaenge](#): > > “requireSecure”: true and false, changes nothing In **SDK:2** “drivers\fgbs-222\driver.compose.json” , I found the next part: ```auto "includeSecure": false, "learnmode": { "image": "{{driverAssetsPath}}/learnmode.svg", "instruction": { "en": "Press the button on your {{driverNameEn}} three times.", "nl": "Druk driemaal op de knop van uw {{driverNameNl}}." } }, ``` ---
**Author:** ![Edwin\_D](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/edwin_d/32/136417_2.png) [@Edwin\_D](https://community.homey.app/u/Edwin_D)\ **Post date:** [October 25, 2021, 4:45pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/28 "2021-10-25T16:45:06Z")
IncludeSecure is the “old” tag to prevent S0 security. Sadly it was not used to apply to S2 security. ---
**Author:** ![Jannis](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jannis/32/36806_2.png) [@Jannis](https://community.homey.app/u/Jannis)\ **Post date:** [October 27, 2021, 10:03pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/29 "2021-10-27T22:03:56Z")
I’m new to Homey and this sort of protocols, but could it be possible to do a raw configuration to change the security parameters? ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/c/0/c0ea64ae14ff47caa80f3585f6629df7ac757499.png) ---
**Author:** ![Jannis](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jannis/32/36806_2.png) [@Jannis](https://community.homey.app/u/Jannis)\ **Post date:** [October 27, 2021, 10:12pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/30 "2021-10-27T22:12:29Z")
I’ve checked the manual for the dimmer and I see now that there is not any such secuity configurations listed, but was thinking that there might be more configurations available than specified in the manual…? ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/e/1/e11ade0199d1707562948dd134962635b85f6ed1.png) ---
**Author:** ![Ryvaenge](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/ryvaenge/32/13197_2.png) [@Ryvaenge](https://community.homey.app/u/Ryvaenge)\ **Post date:** [November 9, 2021, 9:35pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/31 "2021-11-09T21:35:10Z")
No. It`s part of the inclusion process. ---
**Author:** ![MonsMjelde](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/monsmjelde/32/12631_2.png) [@MonsMjelde](https://community.homey.app/u/MonsMjelde)\ **Post date:** [November 13, 2021, 9:52pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/32 "2021-11-13T21:52:05Z")
Really hope this can be fixed in an upgrade soon. Losing the ability to set up associations between lights and push button remotes is a major set back in my opinion. ---
**Author:** ![Jastro](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jastro/32/9107_2.png) [@Jastro](https://community.homey.app/u/Jastro)\ **Post date:** [November 14, 2021, 8:33pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/33 "2021-11-14T20:33:52Z")
Having associations between light switches and lights is not only a nice fallback if/when homey for some reson is offline or breaks down, but a needed failsafe! ---
**Author:** ![TagePP](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/tagepp/32/41036_2.png) [@TagePP](https://community.homey.app/u/TagePP)\ **Post date:** [November 23, 2021, 8:25pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/34 "2021-11-23T20:25:52Z")
Here’s the answer I got from Athom support regarding the issue: "Thank you for reaching out to our support. We are aware of this and have implemented the secure pairing this way because adding devices with S0 security was causing many issues with devices overreporting and causing instability. Furthermore we recommend not to use associations but to use flows instead. That being said, we are also working on this and improvements are being made which may result in the possibility to have a free choice in security level again without the earlier mentioned problems. Unfortunately I can’t give you a timeframe on if and when this will be implemented, but please know it is on our developers roadmap." ---
**Author:** ![TagePP](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/tagepp/32/41036_2.png) [@TagePP](https://community.homey.app/u/TagePP)\ **Post date:** [November 27, 2021, 9:37pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/35 "2021-11-27T21:37:31Z")
FINALY!!! Here’s a temporary fix 🙂 (CLI install method) To disable security remove `requireSecure` and/or `includeSecure` from the `zwave` property in your drivers manifest (if you are using them). and add “security”: [“none”], in the driver.compose.json file. ---
**Author:** ![TagePP](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/tagepp/32/41036_2.png) [@TagePP](https://community.homey.app/u/TagePP)\ **Post date:** [November 27, 2021, 10:16pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/36 "2021-11-27T22:16:12Z")
Remove the line: “includeSecure”: false, Add the line: “security”: [“none”], Test, and let me know 🙂 ---
**Author:** ![Edwin\_D](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/edwin_d/32/136417_2.png) [@Edwin\_D](https://community.homey.app/u/Edwin_D)\ **Post date:** [November 28, 2021, 12:01pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/37 "2021-11-28T12:01:42Z")
PARTLY solved, Thanks @TagePP for the tip. I created and tested an app that was insprired on the previous Walli workaround. This app will allow you to add other z-wave devices unsecure using your temporary fix. I do not expect Athom to accept this in their store, but it is available in the community store. If you know how to do a CLI install, you can get the source from Github too. > [@\[APP\]\[Pro\] UnZ-Cure (add z-wave devices unsecure)](https://community.homey.app/t/app-pro-unz-cure/55597): > > Add Z-wave devices unsecure Z-wave associations are a very important. The main reason is that if Homey isn’t working for some reason, the lights can still be controlled. As of version 7.0, Homey supports more z-wave security levels. That is great for locks and such, but not so much for z-wave associations, because associations need the same security level for both associated devices in order to work. As not all devices support the same security level, and Homey picks the security level based … By the way > [@TagePP](#): > > Furthermore we recommend not to use associations but to use flows instead. That is a really stupid recommendation to follow, though I can imagine Athom would want that. I had the good fortune to have to send Homey in for investigation more than once. Each time Homey was away for more than a week. Also, if Homey dies on you then Homey pro isn’t easy to buy as stock is limited or absent due to the shortages in chips. I was really happy that I could still turn the lights on and off when Homey was not there to execute flows. So if you do not mind that you cannot control your lights is Homey has problems then: by all means. But if you are like me and you want to prevent the WAF dropping well below zero: go for associations if you can. ---
**Author:** ![TagePP](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/tagepp/32/41036_2.png) [@TagePP](https://community.homey.app/u/TagePP)\ **Post date:** [November 28, 2021, 4:06pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/38 "2021-11-28T16:06:39Z")
@Edwin_D That’s why I spend my spare time, trying to figure this out. To be able to use my devices if Homey should have some downtime. But I guess Athom doesn’t see it that way. I have downloaded the masters of my Homey apps, modified them and installed them on Homey (CLI method). With your app, that won’t be necessary. But will “Capabilities”: [“onoff”] be overwritten by the “real” device driver. Or will you have problems with other devices? ---
**Author:** ![Edwin\_D](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/edwin_d/32/136417_2.png) [@Edwin\_D](https://community.homey.app/u/Edwin_D)\ **Post date:** [November 28, 2021, 4:12pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/39 "2021-11-28T16:12:29Z")
The UnZ-Cure app should not conflict with any other apps, it doesn’t really do that much. You indeed won’t have to modify existing apps, and my app does not override any capabilities. My app is only very shortly active to kick off the pairing process, after that you can safely disable or remove the app. The original app will handle everything and won’t know the difference. You can also safely update the original app without worries. Only if you remove the UnZ-Cure app, you will need to re-install it if you add other devices that you want to add unsecure, so I disabled it myself to save resources. See the FAQ for any other questions you may have: > [@\[APP\]\[Pro\] UnZ-Cure (add z-wave devices unsecure)](https://community.homey.app/t/app-pro-unz-cure-add-z-wave-devices-unsecure/55597/3): > > F.A.Q. The install button is grayed, how do I install something from the community app store? In order to do a community app install you first need to have the community app store app on Homey. Thee are Windows/Mac/Linux installers [here](https://store.homey.community/hcs) so you won’t need to learn the CLI method. Then you need to login to your Homey account [here](https://store.homey.community/login). (You may need to put the browser in Desktop mode). Then the [install](https://store.homey.community/app/nl.delsman.unz-cure) button is active and the store works pretty much the same as the original one. How do I pair a de… ---
**Author:** ![forsen](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/forsen/32/11448_2.png) [@forsen](https://community.homey.app/u/forsen)\ **Post date:** [November 28, 2021, 8:21pm UTC](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925/40 "2021-11-28T20:21:36Z")
Gotta love the timing. Decided to change from flow to association for controlling a z-dim from a z-push. Set everything up as one would expect, but nothing happened. Started googling, found out it is a known problem with securely added devices. Ok, so I just need to add them insecure. More googling. Oh, that is not possible because of reasons. But wait, someone made an app to circumvent, nice! Heads over to GitHub. Realize initial commit was just 8 hours ago, talk about luck! Anyhow, ran your app, added both z-push and z-dim, and finally association works flawlessly! To anyone else considering going from flow controlled behavior to association, just do it! The user experience is many times better! Much lower response times, and dimming actually works! Thanks to the dev 😊 [Previous page](https://community.homey.app/t/request-user-selectable-z-wave-security-levels-in-order-for-associations-to-work/49925.md?page=1)