Solutions fit for security certification in embedded systems

With the Cyber Resilience Act (CRA) and NIS-2, the pressure to make control systems ever more secure and update-capable is growing. As a result, product manufacturers are encountering high costs and staffing needs. At embedded world, Linutronix is presenting IGLOS (Industrial Grade Linux Operating System), the first flexibly adaptable and real-time-capable Linux platform whose security is not only claimed but also forms the basis of a TÜV SÜD-certified product in accordance with IEC 62443-4-2. IGLOS supports OTA updates, secure boot, virtualisation, audit logging, and many other functions. By basing their products on IGLOS, machine builders, railway and medical technology manufacturers, and other industrial applications can employ a maintainable, certifiable platform that simplifies security compliance, shortens development times, and secures the operational safety of systems in the long term.

“The new cybersecurity laws pose very high hurdles for our customers’ development departments, both in terms of technical complexity and sheer workload,” says Wilfried Wessner, managing director of Linutronix GmbH. “As a result, required and legally mandated security updates often cannot be carried out or are only implemented with significant delay.”

IGLOS was developed to supply manufacturers with a reliable, standardised, and adaptable foundation for embedded Linux systems. IEC 62443 certification is vital in many industries as proof of the highest security requirements. It provides a solid basis for meeting regulatory requirements by fulfilling all IEC 62443-4-2 operating system requirements and including the complete documentation package necessary for certification. The platform offers a comprehensive security architecture with secure boot, mandatory access control, firewall, memory integrity and encryption, audit logging, and a secure OTA update mechanism. This creates a complete security chain to mitigate attacks at an early stage and protect all components during operation.

A key advantage is the optional support for virtualisation: control systems no longer need to run on dedicated hardware but can be operated as vPLCs in edge cloud infrastructures. This enables more efficient use of IT infrastructure and future-proof system adaptations and expansions. The provided Software BOM ensures transparency across all included software components and enables rapid responses to vulnerabilities, allowing companies to meet compliance requirements such as CRA and NIS-2 more easily. Depending on the intended use, zero-touch onboarding and centralised device management enable automated commissioning and management of new devices throughout their entire lifecycle.

Linutronix operating systems have been used for decades in numerous industries, including programmable logic controllers, industrial sensors, industrial PCs in harvesting machines, laser systems, crane systems, and medical devices. With IGLOS, Linutronix has developed a platform to meet the increased security requirements of these industries. The platform has also proven to be a reliable foundation in critical infrastructures such as energy supply and healthcare facilities.

In robotics, it enables highly precise motion sequences under real-time requirements, secures control systems, and guarantees update capability over many years. Another application area is railway technology. Together with Syslogic, an all-in-one solution based on railway computers has been implemented. This reference implementation allows manufacturers to complete their own certifications significantly faster, shortens time-to-market, and provides verifiable security. Regular security patches and predictable lifecycle management ensure stable and secure operation over many years – an invaluable advantage for systems with long service lives.

“With IGLOS, we create a certifiable foundation that is secure, update-capable, and stable from day one,” says Wessner.

Linutronix stands out through its deep roots in the Linux ecosystem and the team’s more than twenty years of experience in real-time environments. The company team includes key maintainers of the Linux kernel and Debian. Customers benefit from this extensive expertise, which forms a continuously evolving and future-proof foundation for IGLOS. This experience consistently flows into IGLOS and ensures that future requirements are also covered, for example, through the integration of OPC UA FX, TSN, and DetNet to transmit machine data securely in real-time and enable seamless IT/OT integration.

IGLOS consistently relies on open standards and proven open-source components, ensuring that companies do not become dependent on uncertain vendors and can operate their systems independently in the long term without recurring license costs. Alternatively, support contracts ensure short response times in the event of security vulnerabilities or unexpected system behaviour. Customers save time and costs, receive a robust platform, and can fully focus on their core applications. Standardised security functions, a clear architecture, and relief for development teams lead to faster development cycles and lower maintenance costs.

“Our customers benefit from no longer having to create the conditions for cybersecurity and future-oriented operating systems themselves – IGLOS brings everything with it,” says Wessner.

Linutronix GmbH will present IGLOS at embedded world on Booth 4-250, Hall 4, from March 10 to 12, 2026.