Redundant Chassis Pair Requirements
The IEC 62443-4-2 standard requires that high availability systems include the following
components in the redundant chassis pair:
- ControlLogix®5590 controllers
- 1756-RM3 redundancy modules
- 1756-EN4TR communication modules—Other communication module catalog numbers are allowed in the redundant chassis pair, but one partnered set of 1756-EN4TR modules is required forCIP Security™communication.
To meet 62443-4-2 requirements, you must configure the components to make sure that only
authorized communication is possible to the chassis. To secure communication to the
entry point in a chassis, you must deploy a security policy to the 1756-EN4TR
communication module. The security policy enables
CIP Security™
. Use FactoryTalk® Policy Manager
software to deploy the security policy.
IMPORTANT:
To comply with IEC 62443 4-2 requirements and to protect your essential functions of
safety and high availability, do not use a
CIP Security™
-enabled 1756-EN4TR module for I/O communication.
IMPORTANT:
We recommend that you do not add a
CIP Security™
-enabled 1756-EN4TR module to the I/O Configuration tree in the Logix Designer
application because I/O faults can occur due to denied access. To configure a secure
1756-EN4TR module, use its rotary switches or FactoryTalk® Linx
software and not the Logix Designer application. The chassis can include additional communication modules that you configure to establish
trust zones on the chassis. To establish a trust zone, there are two options:
- Converged I/O network, as described in I/O Devices on a Converged Network
- Non-converged I/O network, as described in I/O Devices on a Non-converged Network
For more information on how to use the software, see the following:
- FactoryTalk Policy Manager Getting Results Guide, publication FTALK-GR001
- CIP Security with Rockwell Automation Products Application Technique, publication SECURE-AT001
Provide Feedback