Recommend a UZB-7 or Z-Stick Gen 5** which you can pair to the HE as a "secondary controller". This is good for things like removing ghosts, updating tricky firmware, etc.
https://www.mouser.com/ProductDetail/Silicon-Labs/SLUSB001A?qs=u16ybLDytRbJsMfgk3EnSA%3D%3D
https://www.amazon.com/Aeotec-Z-Stick-Z-Wave-create-gateway/dp/B00X0AWA6E/
** The Z-Stick is 500 series but contains an internal battery so you can walk around and do remote exclusions and (have not done this) remote no-security pairings. The new 700 series Z-Stick does not appear to have a battery so the UZB-7 seems like a much better deal.
Note: these devices are not strictly necessary but can be very useful when/if things go pear-shaped... 
