Enabling Industrial Security via Certificate Management Concepts in the Life Cycle of a Production Gray-Box

The increasing IT/OT-Security threat for industrial plants is leading to new regulations such as the EU Cyber Resiliance Act. At the same time, innovations such as flexible production systems are being driven forward, resulting in changes to the automation architecture and therefore also to possible attack vectors. Existing security concepts must be reviewed for these developments, whereby the use of certificates and therefore the use of a public key infrastructure is fundamental for many security mechanisms. This paper analyzes especially new system architectures like modular production cells or interconnected machine parts with respect to security. For this purpose, different architectural principles such as Gray- and Black-Box are used as a basis and placed in the context of current specifications of certificate management.