HMS Networks has announced that its Anybus Communicators are now fully prepared to support compliance with the Cyber Resilience Act (CRA), helping industrial manufacturers, system integrators, and plant operators meet evolving EU cybersecurity requirements for connected industrial devices.
CRA impact on connectivity
With the introduction of the EU Cyber Resilience Act, connectivity is no longer viewed solely as a functional feature but as a regulated component that must ensure long-term cybersecurity, secure software updates, comprehensive documentation, and verifiable compliance throughout a product’s lifecycle. To help customers address these requirements, HMS Networks has enhanced its Anybus Communicator portfolio with advanced hardware and software security capabilities developed through IEC 62443-certified secure product development processes.
Enhanced hardware and software supporting CRA requirements
To strengthen long term security and lifecycle robustness, Anybus Communicators now include several key updates.
Hardware updates supporting long term security
Real time clock and supercapacitor
These ensure reliable timestamps for certificates, logs, and diagnostics, even during extended power off periods such as weekend shutdowns.
Dedicated security chip
Cryptographic keys and sensitive data are stored securely, enabling strong encryption and protection against tampering.
Together, the real time clock with backup power and the security chip provide a stronger hardware foundation for secure operation and long term lifecycle support under CRA.
Software features aligned with CRA relevant security needs
Secure configuration
Configuration access is protected using HTTPS, preventing man in the middle attacks during commissioning and maintenance. Certificates are user managed to support secure configuration in different environments.
Role based access control
Password protection is activated directly in the web user interface. Each device is delivered with a unique default Admin password, laser marked on the product during production and used for first time login.
Three standard roles are supported:
- Admin – full access
- User – slave network configuration
- Operator – read only access
This ensures that configuration access matches operational responsibility.
Controlled updates and lifecycle protection
The Anybus Communicator supports a controlled firmware lifecycle. On CRA ready devices with updated hardware, safeguards are in place to prevent downgrading to firmware versions released prior to the hardware update, ensuring that CRA relevant security capabilities are not removed.
Protection of intellectual property
Machine builders and device makers can simplify configuration for end users and protect intellectual property by hiding Master configuration details.
Helping customers meet customer requirements
By integrating these hardware and software updates, the Anybus Communicator provides CRA ready connectivity out of the box. This helps device makers, machine builders, system integrators, and factory operators respond to growing cybersecurity, compliance, and purchasing requirements from customers.
Manufacturers and integrators can continue to rely on the Anybus Communicator for both industrial network connectivity and cybersecurity. Units in the field remain supported, while new units are delivered with CRA ready hardware and software, providing a clear, non disruptive path to meet CRA and customer cybersecurity requirements.
HMS Networks builds and maintains connectivity, security tooling, and compliance over the product lifecycle, so customers don’t have to. For many use cases, implementing an Anybus Communicator is the simplest, lowest effort way to meet CRA expectations while preserving uptime, performance, and market access.
Availability and product scope
CRA ready Anybus Communicators start shipping during spring 2026, approximately 1.5 years before the Cyber Resilience Act is enforced.
