---
title: Manage OPC UA Policies
slug: litmusedge-v1/product-features/opc-ua-server/management/manage-opc-ua-policies
description: Learn how to manage OPC UA policies. 
docTags: 
createdAt: 2022-09-26T16:07:10.000Z
---

You can enable and disable policies by navigating to** OPC **>** Management **and referring to the *Policies* section.  

:::hint{type="warning"}
**Important**: Selections in the *Authentication Management* section must match the selections in the *Policies *section or the server will not start.
:::

# Security Policy Encryption Types

- **None**: No encryption type
- **Basic256Sha256**: 256-Bit encryption. It supports Sha256 or stronger hash algorithms for certificates.
- **Basic256**: 256-Bit encryption. It supports the Sha1 and Sha256 hash algorithms for certificates.
- **Basic128Rsa15**: 128-Bit encryption that uses RSA15 as a Key-Wrap. It supports Sha1 or stronger hash algorithms for certificates.
- **Aes256\_Sha256\_RsaPss **(available for Litmus Edge version 3.11.0 and later)
- **Aes128\_Sha256\_RsaOaep **(available for Litmus Edge version 3.11.0 and later)

Each security policy has two different types of *message security modes*:

- **Sign**: Litmus Edge signs messages from the server to assure recipients that the sender is authentic and not an imposter.
- **SignAndEncrypt**: Litmus Edge both signs and encrypts messages from the server to prevent any attackers from reading plain text messages from the server.

More information:

- **Encryption**: Makes messages impossible to read except by authorized users.
- **256 / 128 Bit**: 128-bit is bank-grade encryption. 256-bit encryption is even stronger and is 1038 times harder to crack. The drawback to 256-bit is that it takes servers about 40% longer to encrypt.
- **Hash algorithms**: These are for generating signatures. They assure message recipients that the sender is authentic.
- **Key-Wrap**: An extra layer of encryption for sending messages on insecure networks or for storing messages for extended periods.

# Enable and Disable Policies

To enable or disable policies, click the toggle next to the policy. 

![](https://api.archbee.com/api/optimize/SSUUxKZUk9bFTEPNn_6Zo/gIdUWcrjx4a4GKDhDienF_image.png "Toggle for OPC UA policies ")

# Restart OPC UA Server

After enabling or disabling a policy, you must restart the OPC UA Server. See [Manage the OPC UA Server](docId\:auzIPeIw63IOIZXLEQ3xe) to learn more.