Start with the owner and the task
Identify who invites an external party, what installation is being achieved and what activities are allowed. Personal identity, a clear scope and an agreed period make this access more manageable.
What you can configure in ServiceGate
- Access per customer, location, user, machine and part.
- Restrictions on device addresses, protocols and ports.
- A validity period, maximum connection duration and number of sessions.
- Personal invitations and authentication for sensitive actions.
- Central and local registration of ServiceGate actions.
What audit logging doesn't prove
A connection log does not automatically tell which parameter has been changed in a PLC. Hash-connected log records are not independent, unchangeable archiving. Therefore, agree on what evidence is needed and where additional application logs or a separate log device are required.
From functions to an assessed system
An assessment in relation to IEC 62443 depends on the applicable scope and requirements. Product selection, system architecture, layout, management and procedures are included. ServiceGate does not claim automatic certification or conformity based on these functions.
Discuss what access and accountability are required for your environment.