IEC 62351 - Power Systems Communication Security

Part 3: profiles including TCP/IP (TLS) – IEC 62351 - Power Systems Communication Security

IEC 62351 - Power Systems Communication Security 3:6.2: Part 3, 6.2: signalling of supported TLS versions

Conforming implementations signal which TLS versions they support so that a TLSv1.2 or TLSv1.3 session can be negotiated according to the security policy, the first message exchange being backward compatible so a server can switch version; the profile requires TLSv1.2 or TLSv1.3 and prohibits SSL and earlier TLS versions (RFC 6176, RFC 8996).

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Part 3: profiles including TCP/IP (TLS) – IEC 62351 - Power Systems Communication Security

3:10 Part 3, clause 10: conformance to selected TLS versions, certificate handling and version-specific requirements
3:4 Part 3, clause 4: security issues addressed, threats and attack methods countered, security events
3:6.3 Part 3, 6.3: usage of non-encrypting cipher suites
3:6.4 Part 3, 6.4: certificate support (multiple trust anchors, certificate size, exchange, validation)
3:6.5 Part 3, 6.5: co-existence with non-secure protocol traffic
3:7.2 Part 3, 7.2 and 7.3: TLSv1.2 supported and disallowed cipher suites
3:7.4 Part 3, 7.4: TLSv1.2 key exchange, algorithms, session resumption and renegotiation
3:7.5 Part 3, 7.5: TLSv1.2 extensions (renegotiation indication, trusted CA, signature algorithms, OCSP stapling, server name indication, encrypt-then-MAC)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IEC 62351 - Power Systems Communication Security controls