IEC 62351 - Power Systems Communication Security

Part 3: profiles including TCP/IP (TLS) – IEC 62351 - Power Systems Communication Security

IEC 62351 - Power Systems Communication Security 3:7.2: Part 3, 7.2 and 7.3: TLSv1.2 supported and disallowed cipher suites

For TLSv1.2 the profile names the cipher suites conforming implementations support (AES-GCM and ECDHE-based suites per RFC 5288, 5289 and 8422 among them) and those disallowed (export, NULL authentication, RC4, DES, 3DES, MD5-based and anonymous suites), replacing the first edition's deprecation list with an explicit set.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Part 3: profiles including TCP/IP (TLS) – IEC 62351 - Power Systems Communication Security

3:10 Part 3, clause 10: conformance to selected TLS versions, certificate handling and version-specific requirements
3:4 Part 3, clause 4: security issues addressed, threats and attack methods countered, security events
3:6.2 Part 3, 6.2: signalling of supported TLS versions
3:6.3 Part 3, 6.3: usage of non-encrypting cipher suites
3:6.4 Part 3, 6.4: certificate support (multiple trust anchors, certificate size, exchange, validation)
3:6.5 Part 3, 6.5: co-existence with non-secure protocol traffic
3:7.4 Part 3, 7.4: TLSv1.2 key exchange, algorithms, session resumption and renegotiation
3:7.5 Part 3, 7.5: TLSv1.2 extensions (renegotiation indication, trusted CA, signature algorithms, OCSP stapling, server name indication, encrypt-then-MAC)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IEC 62351 - Power Systems Communication Security controls