“S2: 128” in Device Details is S0. The Settings > Z-Wave Details screen should also show the highest grant (S0 or some level of S2) that was chosen during pairing, though if you didn’t see the prompt at all, then it was either S0 or nothing.
@BertABCD1234 - Strange because none of the other ones indicate as such. So, why doesn’t this one work in the association? Also I thought “ * zwaveSecurePairingComplete: true“ meant secured pairing, no? (Might be dumb questions but outside of communication cryptography, I don’t know much)
Z-Wave details does indicate as S0. So clearly I don’t understand the basic concept of S0, S2, or None for security.
There’s probably a lot I don’t understand, either. 
But I do know there is no security, S0, and various levels of S2 (unauthenticated, authenticated, and access control; the latter doesn’t require user input of a code, the latter two do, and the last is intended for things like door locks and garage door openers … if someone could clear up the “AES-128 Security S0” vs “Z-Wave Network Security” thing on the conformance docs, I’d love to hear it – is there an older/less secure S0 too?).
“S2: 128” in Hubitat actually means S0, while other numbers are I think a bitmask representing whatever combination of S2 grants you gave (generally you’d choose both the highest and everything below it, though you don’t necessarily need to — though for association, as long as your two devices have at least one grant that matches, you should be good; I have not tried this so, this is me regurgitating what I’ve heard theoretically). The “Z-Wave Details” screen is easier to understand here since it tells you the highest grant.
1 Like
Hi all, I was just wondering: any plans to make a new version of the LZW42 RGBW bulbs that supports S2 security? Is this the kind of thing that can be added with a firmware update?
With the addition of S2 support to Z-Wave JS, Home Assistant now supports Z-Wave S2 security.
The Inovelli Red Series switches and dimmers support S2, but the LZW42’s only support S0 or non-secure. This is a problem because as confirmed by @EricM_Inovelli a couple times, Z-Wave association does not work unless both devices use the same security class. This means I cannot convert some of my dimmers over to S2 without losing the bulb associations.
I see lack of S2 support has also been causing a different problem, pairing problems for SmartThings users: Firmware v2.31 (Beta) | LZW42 | RGBW Bulb
Thanks for everything you do!
1 Like
Great question – unfortunately, we looked into this during our last round of firmware updates and we were told that there isn’t enough room on the chip to add it.
Yes, it’s been a headache lol. This is why in 2.31, we added the ability to join the bulb non-securely vs in S0 mode as ST only allowed either S2 or non-secure.
I wish I had better news and please know we tried to get S2 on the bulbs, but ran into a memory issue. The other avenue we tried (and failed) was to get the bulbs in 700 Series, but the issue we ran into there is that the manufacturer was being told by Silicon Labs that they needed to buy 1M 700 Series chips (these are special to bulbs and not the same as what’s found in every other product – something about heat dissipation and California Title 24). We sell maybe 20-30k of these bulbs a year, so we’re far from 1 million 
As a side note, I’ve switched over to everything non-secure and it’s lightning fast. I realize it can be a risk from a security side, but I don’t anticipate anyone standing at my front door with a scanner and controlling my bulbs. You never know I guess!
4 Likes
Thanks for the reply! That does sound like quite the pickle.
FYI, I happened to see on the Z-Wave Alliance website that Sengled has a recently certified (in August) Z-Wave bulb that supports S2, but it is not a color bulb (product manual) so that can explain why they aren’t running into a similiar issue. I couldn’t find it for sale anywhere so maybe it’s not released yet. Since it’s not color it wouldn’t meet my needs, anyway. Just passing the info along in case it is useful to know.