| | | |

CIP Security Earns IEC 62443-4-2 Certification, Strengthening and Streamlining Cybersecurity for Ethernet/IP Products

October 30, 2026

CIP Security Earns IED 62443-4-2 Certification, Strengthening and Streamlining Cybersecurity for Ethernet/IP Products

CIP Security Earns IEC 62443-4-2 Certification, Strengthening and Streamlining Cybersecurity for Ethernet/IP Products

ODVA is pleased to announce that CIP Security™ has been formally certified by TÜV Rheinland to meet the applicable requirements of IEC 62443-4-2 at Security Level Capability 3 (SL-C 3). Security Level 3 protects against intentional violation using sophisticated means from attackers with moderate resources, IACS specific skills, and moderate motivation. Achieving formal certification that the CIP Security Specification complies with the IEC 62443 standard reinforces the position of the technology as the definitive security framework for EtherNet/IP™ products, simplifying the compliance path for product manufacturers incorporating CIP Security.

IEC 62443-4-2, part of the IEC 62443 series, defines the technical cybersecurity requirements for components used in an industrial automation and control system (IACS). CIP Security is an application layer network extension of EtherNet/IP that provides data integrity (rejecting altered data), authentication (verifying trusted identities), authorization (blocking unauthorized commands), and confidentiality/encryption via TLS and DTLS for automation devices.

Certification of CIP Security, and use of this technology in products, significantly lowers the barrier for product manufacturers seeking to achieve their own IEC 62443-4-2 certification. This certification also firmly establishes CIP Security as the natural compliance tool to meet requirements imposed by the European Union (EU) Cyber Resilience Act (CRA) by satisfying core technical and secure-by-design requirements related to confidentiality, integrity, and authentication. The CRA was created to strengthen cybersecurity in a broad range of products with digital elements and connectivity, and it therefore pertains to many products used in all types of operational technology (OT) applications.

“Achieving this certification is a significant accomplishment and further strengthens the position of EtherNet/IP as a leading secure industrial network technology,” said Dr. Al Beydoun, President and Executive Director of ODVA. “This represents an important milestone for EtherNet/IP technology and further demonstrates ODVA’s commitment to advancing secure industrial communications and supporting the cybersecurity needs of our members and the broader industrial automation community.”

Visit www.odva.org to obtain the latest version of The EtherNet/IP Specification including CIP Security and to review PUB00365 “CIP Security: A Certified Foundation for IEC 62443-4-2”.

CIP, CIP Security, and EtherNet/IP are trademarks of ODVA, Inc. DeviceNet is a registered trademark of ODVA, Inc. Other trademarks are the property of their respective owners.

About ODVA
ODVA is an international standards development and trade organization with members from the world’s leading automation suppliers. ODVA’s mission is to advance open, interoperable information and communication technologies for industrial automation. Its standards include the Common Industrial Protocol or “CIP™,” ODVA’s media independent network protocol – and industrial communication technologies including EtherNet/IP, DeviceNet and others. For interoperability of production systems and their integration with other systems, ODVA embraces the adoption of commercial-off-the-shelf, standard Internet and Ethernet technologies as a guiding principle. This principle is exemplified by EtherNet/IP – today’s leading industrial Ethernet network. Visit ODVA online at www.odva.org.

More Information

www.odva.org

Related Story

ODVA: Why Secure Industrial Communication Depends on Deployment as well as Protocols

The Industrial Security Harmonization Group (ISHG) has released a joint industry perspective highlighting a critical truth in industrial cybersecurity: secure industrial communication is not determined by protocols alone, but by how they are deployed and managed in real-world environments.

Related Articles



Editor’s Pick: Featured Article

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s scalable engineering software, u-control 2000, adapts individually to your requirements. And, the u-control is powerful, compact and fully compatible with Weidmüller’s I/O system u-remote. This article looks at what makes u-control the heart of your automation.

Programmable logic controllers (PLCs) are one of the main components of any automated system. A typical control system has inputs, outputs, controllers (i.e., PLCs), and some type of human interaction with the system, a human machine interface (HMI), for example.

Read More



Latest Articles

  • Why Stable Measurements Matter More than High Resolution

    November 3, 2026 Why Stable Measurements Matter More than High Resolution When evaluating displacement sensors, it is easy to focus on a single specification such as resolution. Higher numbers often suggest better performance, leading engineers to compare products based on their smallest measurable increment. While resolution is certainly important, it represents only one part of… Read More…

  • How to Check Task Cycle Time in CODESYS

    November 3, 2026 Compare two methods for measuring actual controller task timing By Zhou Gong, Control Engineer at Festo Learn how to measure actual task cycle time in CODESYS and choose the right method for precise controller performance checks. Introduction Task cycle time is one of the practical values engineers can use to understand how… Read More…