If you want to perform a secure inclusion of a node using OZW, the Z-Stick has to be connected to the USB port. This is because the security key is added and handled within OZW, not within the Z-Stick. The button on the Z-Stick is great for quick exclusions, but only performs regular, non-encrypted inclusions.
If your device supports the S0 Security CC, make performing inclusions over USB a habit.
There are two ways of performing proper inclusions.
- Call the zwave/add_node_secure service straight from the Developer Tools.
- Shut down HASS and fire up OZWCP in accordance with the steps provided by ih8gates.
Personally I started off using OZWCP, but realized it was unnecessary since everything can be performed though HASS. Calling the service zwave/set_config_parameter works very well. You can refer to the documentation for service descriptions. An example on changing a parameter is displayed here.