Security & Compliance.
Industrial cybersecurity designed for the post-Stuxnet era. Zero-trust architecture built natively into the controller.
The IT / OT Convergence Threat
Historically, CNC machines were "air-gapped"—isolated entirely from the corporate network. Programs were loaded via USB or RS-232. Today, Industry 4.0 demands that machines connect directly to ERP systems and telemetry dashboards.
Connecting a legacy controller (often running an unpatched, embedded version of Windows XP or Windows 7) to a routed network is a catastrophic security vulnerability, frequently exploited by ransomware operators.
Architectural Segregation
SmartMachine OS forces physical segregation of networks at the hardware level. The IPC must have a minimum of two separate Network Interface Cards (NICs).
| Interface | Subsystem | Security Posture |
|---|---|---|
| eth0 (IT Network) | Web UI, OPC-UA, MQTT | Standard Linux firewall (iptables), encrypted payloads, authenticated access only. |
| eth1 (OT Network) | EtherCAT Motion Bus | Hard-dropped. No standard IP traffic allowed. Raw EtherCAT frames only. |
Encrypted Telemetry (OPC-UA)
Unlike legacy protocols like MTConnect (which often stream unencrypted XML over HTTP) or Focas (proprietary binary), SmartMachine OS utilizes the security models built into OPC-UA. All telemetry connections can be configured to require X.509 certificates (Basic256Sha256) and user authentication. You control exactly who, or what system, is allowed to read spindle loads or execute remote programs.
Remote Diagnostics via Wireguard
When an OEM technician needs to troubleshoot a machine, they typically ask IT to open a port on the corporate firewall for RDP or VNC—a massive security hole. SmartMachine OS includes a native Wireguard VPN client. The machine establishes an outbound, encrypted tunnel to a secure relay server. No inbound firewall ports need to be opened on the factory floor, and the connection can be cryptographically severed by the operator via a physical switch tied to the PLC.