https://forge.codesys.com/forge/talk/Engineering/thread/53f3aa8018/2020-02-27T13:59:54.511000ZRecent posts to Application security2020-02-27T13:59:54.511000Z2020-02-27T13:59:54.511000ZAnonymoushttps://forge.codesys.com/u/*anonymous/https://forge.codesys.com84af33df2d8a2fa828e0c5496047d9dc93482914

<div class="markdown_content"><p><em>Originally created by:</em> scott_cunningham</p> <p>Check with your hardware vendor. I know at least of one that gives you a call to get the mac id on the device. In this case, you can give your customer a special compile that only works on that hardware.</p> <p>If you want to get crazy, you can also start doing some special codes stored at random locations... this is ok if you are the one programming the device. </p> <p>Of course, really determined cheaters can spoof mac ids if they really try... but I think you will never win against that type of customer.</p></div>

2020-02-27T13:59:54.239000Z2020-02-27T13:59:54.239000Zchris.beardhttps://forge.codesys.com/u/chris-beard/https://forge.codesys.com23b969e3a818378687db5ba162edf530a3664ed2

<div class="markdown_content"><p>I know of no easy built in way to do this, however there are some workaround options that may be possible (and combination of first two).</p> <ul> <li>Encrypt the boot project so someone cannot read it off the PLC.</li> <li>Read a file on the PLC (if windows/linux) based and look for a set of STRING Variables, otherwise do not execute MAIN. Then the PLC must obviously also have that file on.</li> <li>On Beckhoff PLCs, you can choose not to download source code to PLC so no one can actually read off it. You can also do a ADS comparison so that the code will only run on PLCs with a given ADS address of X.X.X.</li> </ul></div>

2020-02-27T13:59:53.966000Z2020-02-27T13:59:53.966000ZAnonymoushttps://forge.codesys.com/u/*anonymous/https://forge.codesys.comcef46198ec09f41d08c638087b8279bb475fb756

<div class="markdown_content"><p><em>Originally created by:</em> <em>gnom4</em></p> <p>Hi</p> <p>What are the ways of securing a codesys app on a plc so it could run only on a one physical plc(not one type).<br/> Is there a way of connecting it to the hardware of the plc - check serial numbers of hardware or something else to prevent the copied compiled app from running on another plc of the same type...<br/> If yes - how can it be done...</p> <p>PS. I don't want to use USB security keys or stuff like that....</p></div>