Remote Support, Remote Access, PLC/HMI systems

I think you want to make sure, and stress to your client that they make sure, that providing you (or anyone else) access to their systems for remote diagnostics and repair must be done very carefully.

Last time I was involved in a project, encryption wasn't (automatically) employed on links like that--we kept our systems off the Internet (the hardest part of that was employees that wanted access to the Internet and occasionally managed to connect the systems).

Very risky. Ask Iran what they think about their centrifuge problem. (I don't know how the virus got into their control systems, but a rogue (or intentional) connection to the Internet could have been the path.)

It looks like I did it again (marked myself off-topic unintentionally). (Or, I'm very forgetful, but I can't imagine why I would have intended that.)

I'm assuming that because there are 5 votes for off-topic that it was me.

Anyway, I'm not marking this OT in an effort to call attention to my previous post.

" Ask Iran what they think about their centrifuge problem. (I don't know how the virus got into their control systems, but a rogue (or intentional) connection to the Internet could have been the path.)"

Transported via USB memory sticks holding unlicensed bootleg copies of WinCC (Iran is prohibited from purchasing it). If the virus (worm) detected the license key, it did nothing. If it didn't see the key, it inserted little seemingly innocuous codes that only affected parameters operating specific brands of VFDs known to be in use on the centrifuges they bought surreptitiously. Brilliant really.

Hadn't heard that about WinCC, don't think it's true but don't know, much less is being said on how Stuxnet "jumped" off the USB sticks into the HMI than the attack its self and you are correct about that from what others have worked out, attacked VFD's working at around 400 Hz and tested on confiscated Libyan centrifuges at Oak Ridge in the same setup as Iran.

You might take a look at this. It supports a variety of HMI products but may not give you all of the remote repair facility you're looking for. _{(Usual Disclaimer)}

Have a look at LogMeIn

For many years we have been using Norton "pcanywhere" to do the exact task that you require.

Its main advantage over other software is the security it offers to the client site. This makes selling your service easier.