Rockwell Automation control devices support CIP Security

05 March, 2019

ODVA, a global association of the world’s leading automation companies, developed CIP Security. It is an extension to the Common Industrial Protocol (CIP), which is the application-layer protocol for EtherNet/IP. CIP Security is the first industrial automation protocol to support transport layer security (TLS), the most proven security standard in widespread use on the World Wide Web today.

Protection

“CIP Security can protect devices and systems that use EtherNet/IP from some of the top risks in connected operations, such as unauthorised PCs,” said Tony Baker, portfolio manager, security, for Rockwell Automation. “It does this in a few key ways. First, it limits device connectivity to only trusted PCs and devices. It also guards against packet tampering to protect data integrity. Finally, it encrypts communications to avert unwanted data reading and disclosure.”

Engineers will be able to implement CIP Security in their systems through new Rockwell Automation products and firmware updates to existing products such as Allen-Bradley ControlLogix controllers, communication modules and Kinetix servo drives.

In addition, the newly enhanced FactoryTalk Linx communications software allows FactoryTalk visualisation and information software running on a PC to communicate to CIP Security-enabled devices. The new FactoryTalk Policy Manager tool within the FactoryTalk software is used to implement and configure security policies between CIP Security-enabled devices.

Rockwell Automation developed this new capability to work with existing industrial control devices regardless of whether or not they were designed to support CIP Security. This allows industrial users to phase in security over time and retrofit existing installations.