SCADA software communicate with a wide variety of equipment: Programmable Logic Controllers (PLCs), remote management controllers, regulators, Industrial Internet of Things (IIoT) devices, web portals, etc. Securing data flows is a key challenge in ensuring the confidentiality and integrity of the data exchanged. Cybersecurity requirements are becoming increasingly stringent, particularly with the European NIS 2 Directive.
Among the many protocols natively supported by Topkapi are OPC UA and SOFREL LACBUS, which incorporate the fundamental mechanisms for secure communications. Their aim? To authenticate equipment and to guarantee the confidentiality and integrity of data exchanged with the SCADA software.
The OPC UA protocol enables Topkapi to communicate with third-party solutions in a standardised manner. Designed to address industrial cybersecurity challenges, it relies on three complementary security measures:
Upon the first connection, the certificate presented by the device must be validated before communications can be established. This validation establishes a trust relationship between the OPC UA server and Topkapi. Communications then take place exclusively between authenticated devices.
As for the secure LACBUS protocol designed for SOFREL hardware in the S4W range, it also uses a certificate mechanism. The Topkapi SCADA software integrates seamlessly into the SOFREL ecosystem: certificates are created and signed by SOFREL’s S4-Keys software, then imported into Topkapi. Once this certificate management system is in place, the configuration of devices in Topkapi is identical to that of non-secure SOFREL devices.
In the face of increasingly stringent regulatory requirements and the growing number of cyber threats, securing industrial communications is a key factor in protecting critical infrastructure. The Topkapi SCADA software natively supports several secure protocols. OPC UA and SOFREL LACBUS are two examples, but other secure protocols are also supported, such as SNMPv3, secure MQTT and all HTTPS-based protocols.
This is in line with the requirements set out in the European NIS 2 Directive. Operators can thus strengthen the cybersecurity of their facilities by ensuring the reliability of data exchanges between field devices and the SCADA system.
Discover AREAL's other recommandations for a secure Topkapi SCADA architecture >>
