This page provides information about the current CRA-conformity of our products. This is an overview and starting point for further technical details and data and is currently
a work in progress. So this page will be updated from time to time, it may contain errors and is updated/changed without further notice. Products not listed here are not affected
by the EU CRA as they are no network devices or do not come with any firmware on board and therefore are not covered by the EU CRA.
This information is intended to help machine and system manufacturers assess the CRA requirements applicable to their overall product. It is not a declaration of conformity or a certification. In case of any questions please
contact us!
| Component | CRA-evaluated 1) | SBOM 2) | Software/Firmware updates | Software/Firmware verification | Verification trust anchor 3) | Cybersecurity risk assessment 5) |
| E1701D |  |
In manual | Updates downloadable on webpage |
Controllers shipped prior to 01.01.20276): manually via checksum and signature fingerprint Controllers shipped after 01.01.20276): automatically via hardware |
Controllers shipped prior to 01.01.20276): checksum signature provided in manuals and email signatures 4) Controllers shipped after 01.01.20276): the controller itself as long as the supply chain is secure and is not considered to have been compromised |
Intended to be operated in an encapsulated/separated industrial environment. Component is hardened against unspecified usage scenarios and malicious communication attempts with state of the art security measures according to the intended operational environment. |
| E1701M | |
In manual | Updates downloadable on webpage | |||
| E1702S | |
In manual | Updates downloadable on webpage | |||
| E1703C | |
In manual | Updates downloadable on webpage | Automatically via E1703C hardware | The controller as long as the supply chain is secure and is not considered to have been compromised | |
| E1803D | |
In manual | Updates downloadable on webpage |
Controllers shipped prior to 01.01.20276): manually via checksum and signature fingerprint Controllers shipped after 01.01.20276): automatically via hardware |
Controllers shipped prior to 01.01.20276): checksum signature provided in manuals and email signatures 4) Controllers shipped after 01.01.20276): the controller itself as long as the supply chain is secure and is not considered to have been compromised |
|
| E1803D IntelliIO Extension v1 | Not compliant, please use IntelliIO v2 instead! | |||||
| E1803D IntelliIO Extension v2 | |
In manual | Automatic update via Firmware of E1803D | Automatically done by firmware, integrity depends on the integrity of the E1803D firmware | The E1803D firmware, trustability depends on the trustability of the E1803D firmware | No obvious risks: not accessible from outside, fully encapsulated in E1803D environment. |
| BeamConstruct | |
In manual | Updates downloadable on webpage | Manually via checksum and signature fingerprint | Checksum signature provided in manuals and email signatures 4) | Intended to be operated in an encapsulated/separated industrial environment. Component is hardened against unspecified usage scenarios and malicious communication attempts with state of the art security measures according to the intended operational environment. |
1) According to the current state of information, subject to changes, subject to additional information of sub-suppliers, does not necessarily include a declaration of conformity
2) Software bill of material, lists used (3rd party) software components which may be subject to security updates
3) The trust anchor is a known and trustworthy starting point used to verify that a digital signature is genuine and for sure not being compromised itself
4) Emails and manuals itself can be (theoretically) compromised too, so that the trust anchor is not as trustworthy as it should be. So this fingerprint always has to be cross-checked,
either against some older email signatures/manuals printed out prior to any possible incident, or by additional verification using an alternative communication channel
5) The CRA assessment of a complete machine may differ from the assessment of an individual component.
6) This deadline is preliminary and subject to change
