Energy & electric grid · Substation Engineering · PKI · Field Operations
Rotate substation device certificates inside narrow outage windows
Can relay, gateway, and engineering trust change without creating a protection or visibility gap?
Operational pain
Remote assets may require truck rolls, vendor tools, synchronized trust updates, and rollback under strict operational switching plans.
Trigger
Certificate expiry, CA migration, merger of utility trust domains, or compromise response.
QNSI contribution
Connect the decision to a controlled security path
Use QNSI lifecycle records to group assets by issuer, mechanism, access path, outage window, and rollback readiness.
Decision artifact
A substation rollover schedule with field package, trust overlap, pretest, abort criteria, and post-change proof.
What still requires validation
Grid operations validates relay behavior, remote access, fail-safe state, communications, and restoration procedure.
External problem context
Primary sources
These sources establish the external requirement or risk context. They do not endorse HEOSSI or prove that QNSI completed this scenario.
Evidence boundary
What this page does—and does not—prove
This is a product evaluation pattern, not a customer case study, certification, legal opinion, regulator endorsement, or claim that a production deployment completed the described work.