Topkapi 6.3: enhanced cybersecurity and optimised operation

Version 6.3 is part of AREAL's approach to obtaining ANSSI* certification for a Topkapi target architecture. This approach anticipates the European NIS2 directives (still awaiting transposition into French law), which will impact many organisations operating critical infrastructure in France by 2028/2029. 

 
Cybersecurity developments 

Secure SYSLOG logging: In accordance with ANSSI requirements, Topkapi integrates the SYSLOG protocol to log system and process events on a remote system. This feature is essential for system hardening, identifying unusual activity and auditing. 

Enhanced access management: Strong passwords are now mandatory for local operator accounts, with evaluation based on length, complexity and reference dictionaries. A new "super administrator" right, recommended by ANSSI, is now mandatory: only this profile can manage administrator accounts. 

Enhanced security by default: Any upgrade to version 6.3 automatically activates the enhanced security option. This unconditional activation guarantees an optimal level of protection. Connection with versions prior to 6.0 is no longer possible. 

API key management: An interface allows you to view and manage client/server connection tokens, in particular to revoke access from a mobile device that has been reported lost. 

Protection of sensitive data: An anonymisation tool allows application copies to be sent for support purposes by automatically replacing all sensitive data with anonymous information. The PostgreSQL connector is now secured via SSL. A complete export of the access rights policy facilitates audits. 

Operational developments 

Partial configuration reloading: Changes to variables or synoptics are now applied almost instantly, without service interruption or user disconnection. Only acquisition operations still require a restart. 

Modernised navigation window: The navigation interface has been completely redesigned with default access to all views, integration of Dataviz reports and dashboards, and optimised mobile operation in full-screen mode. These improvements eliminate the need for often costly script development. 

Automated balance sheet management: An integrated task scheduler allows you to schedule periodic balance sheet generation from any Topkapi client. A calendar interface makes it easy to view the generated files. The complete balance sheet and dashboard creation chain is now operational. 

Enhanced web client: Porting to Angular technology continues with spreadsheet and alarm views, offering improved responsiveness and touch adaptation. Operator management is now accessible from the web client. Interoperability between curves and samples is bidirectional. Pre-configured curve templates simplify the creation of visualisations. 

 
 
Version 6.3 of Topkapi is now available. This version is part of AREAL's overall approach to cybersecurity, which is also ISO 27001 certified, positioning the company as a trusted partner for securing industrial information systems. 
 
* French National Agency for Information Systems Security