I have a handful of devices which I added to the z-wave network with "S2 Authentication". I am wanting to undo this and have them in my system with NO security. However, I don't want to break automations/rules/notifications/etc. I have set up with them.
Is there a way for me to either remove the secure authentication, or to re-add the SAME device without it, without breaking automations tied to the device?
I'm no expert, but I think you'll have to exclude and then include.
Have you checked out the Swap Apps Device tool in Settings?
You create a similar virtual device, swap it in, exclude the real device, include with no security, then use the Swap Apps Device tool again to swap all the apps to the real device, delete the virtual device.
It's really quite easy. I've been doing it a lot lately.
You need to re-include the device to change security. You can create a temporary virtual device, use Swap Apps Device, exclude the original device, then re-include and use the "Replace Device" option you'll get after incision on new-ish hub platform software versions (or just do Swap Apps Device yourself after--same thing, just one less step the other way).
You can also just reset the device or do a general exclusion with another controller, then re-include. However, unless you are adept at removing dead Z-Wave nodes, I would suggest another approach (as this will leave you with one for each device). You could also try the Z-Wave native "Replace" feature, but IMHO it's a bit finicky and the hub's own feature works more reliably, as long as you aren't using devices not supported by this approach, which would only be parent/child devices. You can still do those the "old" way--manually (or Z-Wave Replace should work, but again....).
Any pariticular reason why you want to remove S2? At this point the general thinking here about S2 (changed greatly from a couple years ago) is "Won't hurt, might help."
If you do end up doing this, as @velvetfoot suggests, using the Swap Apps Device tool can make this much simper/safer.
There is also an option to do a Replace from the Z-Wave Details page but I hesitate to recommend it as it doesn't seem to be 100% reliable across different folks hubs (including mine).
Yeah...one of the ways to use it, is to exlude a device using a secondary controller (another hub, UZB stick, etc.). When you do that the device remains on the original hub - it doesn't know it's been excluded. You can then do a Refresh on the Z-Wave Details page for that device, and since the device can't respond any more it will appear to be missing, and a Replace button will appear for the device. Put the device into pairing mode and hit Replace and the hub should slot it back into the hub using the same DNI, so nothing needs to be updated.
Problem is I've had it work wonderfully sometimes, and then not at all at other times.
Speaking of ghosts....I've got 9 of them while including a bunch of LR switches. I understand there's no way to get rid of them. Maybe you said it, lol. Could you confirm?
I'm not very familiar w/LR devices...I have two, got them successfully joined a while back w/some help from Jeff and others, but haven't done anything w/LR since in terms of moving/removing/pairing, etc. So not the best person to offer help w/them at this point. I intend to get a few more LR devices, but waiting to see if/when/how Hubitat updates Z-Wave now that some of the SilLabs constraints have been removed.