Secure password management for Siemens TIA Portal

German company Wibu-Systems has developed a password provider for the Siemens Totally Integrated Automation (TIA) Portal V14 SP1 or higher based on its Password API.

The engineering data that is stored in the TIA Portal is often very sensitive in nature. While online teamwork is highly effective, logical access controls are paramount to make sure that only entitled users can view and edit only those projects they have full rights to.

With Siemens’ Password API, Wibu-Systems created a password provider that streamlines know-how and write protection and, in turn, increases the access control and engineering data protection measures. Rather than being susceptible to disclosure, passwords can now be safely stored in Wibu-Systems’ CmDongles, hardware secure repositories that come in several form factors, including USB sticks (with optional flash memory), memory cards (SD, microSD, CF, and CFast type) and ASICs. Access controls by timer or unit counter govern the ability to access or edit the engineering data.

CmDongles are operated with CodeMeter, Wibu-Systems’ technology incorporating proprietary encryption methods based on public symmetric and asymmetric standards, like AES 256-bit, RSA 2048-bit and ECC. Its password management tool is flexible enough to allow the creation and administration of passwords in accordance with the customers’ requirements and secure enough to safeguard the digital identity of the TIA Portal’s users. Passwords are transferred online or offline, conferring additional versatility to the solution.

Wibu-Systems has also worked with other major automation vendors, including B&R and Rockwell Automation, to provide security solutions for their development systems.