In industrial automation, keeping device firmware up to date is critical for maintaining security, reliability, and compliance with evolving regulations. With the introduction of the Cyber Resilience Act (CRA), firmware updates for connected devices will soon become mandatory, creating an urgent need for standardized methods to manage these updates efficiently across diverse equipment. Currently, firmware updates often require vendor-specific tools, which can complicate maintenance and increase operational risk in multi-vendor environments.
This paper presents a proposal for a common, harmonized, and open approach for performing firmware updates over EtherNet/IP. By specifying CIP Object(s) and services as a standardized, vendor-independent interface for firmware updates and exploring a common packaging format for firmware, the approach aims to simplify deployment, reduce errors, and streamline device management. Key use cases and implementation strategies are outlined, highlighting how the solution can accommodate the needs of both simple and complex devices.
Adopting such a standardized approach provides significant benefits to end users, enabling a single tool to manage firmware updates across an entire facility regardless of the number of vendors involved. This reduces the operational burden of managing multiple update processes, enhances consistency and security, and aligns with regulatory compliance requirements.
By providing a vendor-neutral framework for firmware updates, ODVA members and the broader EtherNet/IP community can adopt a more efficient, reliable, and scalable approach to maintaining device firmware, supporting both operational efficiency and regulatory compliance.
Authors Matt Frazer, Manager, Vendor Adoption Tools, ODVA Joakim Wiberg, Director of Technology, ODVA
