Abstract: Techniques for authenticating industrial devices in an industrial automation environment are disclosed herein. In at least one implementation, a physical unclonable function response of an industrial device is extracted. The industrial device transmits a security certificate signed by a certificate authority that includes a device public key to a system, wherein the system validates the security certificate, encrypts an authentication challenge using the device public key, and transmits the authentication challenge to the industrial device. The industrial device generates a device private key using the physical unclonable function response and decrypts the authentication challenge using the device private key.

Abstract: Techniques for authenticating industrial devices in an industrial automation environment are disclosed herein. In at least one implementation, a physical unclonable function response of an industrial device is extracted. The industrial device transmits a security certificate signed by a certificate authority that includes a device public key to a system, wherein the system validates the security certificate, encrypts an authentication challenge using the device public key, and transmits the authentication challenge to the industrial device. The industrial device generates a device private key using the physical unclonable function response and decrypts the authentication challenge using the device private key.

Abstract: Techniques to facilitate feature licensing of industrial devices employed in an industrial automation environment are disclosed herein. In at least one implementation, a security certificate for an industrial device is provisioned based on a first private key associated with the industrial device, wherein the first private key is securely stored in a hardware root of trust within the industrial device. A device information package for the industrial device is generated based on the security certificate, wherein the device information package is encrypted with a first public key paired with the first private key and signed by a certificate authority using a second private key. The device information package is provided to the industrial device, wherein the industrial device is configured to validate the device information package using a second public key paired with the second private key and decrypt the device information package with the first private key.

Abstract: Techniques to facilitate feature licensing of industrial devices employed in an industrial automation environment are disclosed herein. In at least one implementation, a security certificate for an industrial device is provisioned based on a first private key associated with the industrial device, wherein the first private key is securely stored in a hardware root of trust within the industrial device. A device information package for the industrial device is generated based on the security certificate, wherein the device information package is encrypted with a first public key paired with the first private key and signed by a certificate authority using a second private key. The device information package is provided to the industrial device, wherein the industrial device is configured to validate the device information package using a second public key paired with the second private key and decrypt the device information package with the first private key.

Abstract: Techniques to facilitate protecting control data used in an industrial automation environment are disclosed herein. In at least one implementation, an encryption key pair is generated for an industrial controller, wherein the encryption key pair comprises a public key and a private key. The private key is stored within a secure storage system of the industrial controller. Controller program content is then encrypted using the public key to generate encrypted controller content. The encrypted controller content is then provided to the industrial controller, and the industrial controller is configured to decrypt the encrypted controller content using the private key and execute the controller program content.

Abstract: Techniques to facilitate protecting control data used in an industrial automation environment are disclosed herein. In at least one implementation, an encryption key pair is generated for an industrial controller, wherein the encryption key pair comprises a public key and a private key. The private key is stored within a secure storage system of the industrial controller. Controller program content is then encrypted using the public key to generate encrypted controller content. The encrypted controller content is then provided to the industrial controller, and the industrial controller is configured to decrypt the encrypted controller content using the private key and execute the controller program content.

Abstract: A change monitor as part of an online editor of a sequential function chart (SFC) programming environment monitors edits to a control routine. The change monitor provides warning to users before taking actions that would result in a reset of the control routine currently being executed by an industrial controller. The change manager reduces or eliminates many situations that would otherwise result in a reset as well by instructing online editor as to what language elements need to be assembled to implement the change. The change monitor also filters the manner in which reset warnings are given to reduce unnecessary distractions.

Abstract: A change monitor as part of an online editor of a sequential function chart (SFC) programming environment monitors edits to a control routine. The change monitor provides warning to users before taking actions that would result in a reset of the control routine currently being executed by an industrial controller. The change manager reduces or eliminates many situations that would otherwise result in a reset as well by instructing online editor as to what language elements need to be assembled to implement the change. The change monitor also filters the manner in which reset warnings are given to reduce unnecessary distractions.

Abstract: A change monitor as part of an online editor of a sequential function chart (SFC) programming environment monitors edits to a control routine. The change monitor provides warning to users before taking actions that would result in a reset of the control routine currently being executed by an industrial controller. The change manager reduces or eliminates many situations that would otherwise result in a reset as well by instructing online editor as to what language elements need to be assembled to implement the change. The change monitor also filters the manner in which reset warnings are given to reduce unnecessary distractions.

Abstract: A change monitor as part of an online editor of a sequential function chart (SFC) programming environment monitors edits to a control routine. The change monitor provides warning to users before taking actions that would result in a reset of the control routine currently being executed by an industrial controller. The change manager reduces or eliminates many situations that would otherwise result in a reset as well by instructing online editor as to what language elements need to be assembled to implement the change. The change monitor also filters the manner in which reset warnings are given to reduce unnecessary distractions.