OPC UA security basics: modes, policies and certificate trust
What Sign and SignAndEncrypt actually change, which security policies to avoid, how application certificates and trust lists work, and the connection errors you will meet first.
· 3 minFrom the production line to business systems: implementation steps, design decisions and commissioning checks.
19 articles · OT security · Open the topic hub →
What Sign and SignAndEncrypt actually change, which security policies to avoid, how application certificates and trust lists work, and the connection errors you will meet first.
· 3 minA practical method for sizing OT subnets: how CIDR maps to host counts, how to leave room to grow, how to align subnets with cells and zones and how to document the plan.
· 4 minStart with existing evidence, reconcile device ownership and make unknown assets actionable.
· 2 minPlan a restore drill that checks project files, licenses, hardware dependencies and operational acceptance.
· 2 minDocument the purpose, approved route, time window and closeout evidence for a maintenance connection.
· 2 minUnpatched devices are a risk; botched updates are a production outage. A process for firmware that balances both.
· 2 minThe playbook that protects office PCs does not transfer to controllers. What ransomware actually does to OT and where the defenses belong.
· 2 minOT logging is hard because devices log poorly and clocks drift. A practical baseline that satisfies both engineers and auditors.
· 2 minRedundant SCADA systems fail in interesting ways. What the standard topologies are and how to test the one you buy.
· 2 minUnmanaged switches are cheaper; managed switches are controllable. When the difference matters - and when it doesn't.
· 2 minHardening a controller is different from hardening a server. Practical, low-risk measures for PLCs and their networks.
· 2 minYou cannot protect what you cannot see. How to build and keep an asset inventory that security and maintenance can both use.
· 2 minLet’s look at your machine, your data flow or your production goal together. Describe your situation in a few sentences and the ASP Dijital team will reply by email.