|
Now available to all registered participants of the Cybersecurity Acceleration Program, BACnet International is proud to announce the alpha release of BACCARI – the BACnet Certificate Authority Reference Implementation Tool. This project is an example implementation of a Certificate Authority for BACnet. It builds and processes files using the CARI file format, as proposed in 135-2020 Addendum cs, out for public review. The zip file format conveys BACnet/SC CSRs to a certificate authority and returns the signed operating certificates. This tool will become the industry’s standard for certificate authority implementation.
Currently, this project is at the ALPHA stage. The user-interface is not in the final style, but is functional. The beta version will be scheduled for later in the year.
There are several ways to use this for testing its features and workflows. As of today, it has a single mode of operation where all features are available, limited only by the user’s login as “Administrator” or “User”. Future builds will have a standalone offline “Builder” mode that is just used to build CSR zip files and concepts like “Download” from a list, will be changed to “Save” a single file.
The tool is capable of operating in several different scenarios listed below from simplest to most advanced.
Scenario 1: User is both Installer *and* Administrator
Scenario 2: Installer builds CARI file to submit by email
Scenario 3: Administrator receives a CARI file by email
Scenario 4: Administrator sets up web server for manual approval
Scenario 5: Administrator sets up web server for auto-approval
Scenario 6: Installer’s proprietary tool creates the CARI file itself
Join the Cybersecurity Acceleration Program to gain EARLY access to this tool!
The Cybersecurity Acceleration Program will provide a complete Certificate Authority reference implementation and a sister tool that can generate and validate Certificate Signing Request files and package them into an interoperable file format for the Certificate Authority. Additionally, all program participants will have access to cybersecurity implementation webinars and an interactive, peer-to-peer forum led by experts in BACnet and cybersecurity.
Participation in the program will help suppliers ensure their certificate management tools are interoperable with tools from other suppliers. This will keep integration costs down and maintain their reputation as a collaborative participant in multivendor environments. The program will also shorten the learning curve for manufacturers who do not have cybersecurity implementation experts on staff and help to ensure their products are ready for whatever comes next in building automation cybersecurity. For more information, click on the link below or contact David Nardone at david@bacnetinternational.org.
The following companies and universities are already registered participants:
| 
