Fibaro power plug not including secure with ZwaveJS

I am trying to the add a Fibaro power plug (Z-Wave plus) secure to my network. But for some reason it will not add securely when I use “Secure if possible”. Not as S0 or S2. It also don’t fall back to S0. It’s added insecurely.

When I select “Legacy Secure” is does work with S0. This means that I always have to add all devices Legacy Secure, as S2 does not work and it does not fall back to S0

Does anyone here know how to connect a device S2 secure?

I use a Aeotec gen5 Z-Wave stick.

I’m running into the same issue. Their manual specifically says firmware versions 3.2+ support S2, but selecting the “Secure if possible” option when including the device consistently adds it insecurely. Only enforcing Legacy works.

It sounds like it should be possible to have S2 - is there a way to have inclusion enforcing S2, without any fallback?

I think the Fibaro plugs do not support S2. And choosing “Secure if possible” is not working as you would expect, like if S2 is not possible, use S0. So, basically you have to add non S2 devices with S0 if you want security.

Fair, I can’t find anymore where I saw S2 was supported, just that they support security, which could mean S0 only, so might be that.