Water & wastewater · SCADA Operations · Field Maintenance · PKI
Rotate certificates on remote water PLC gateways
Can trust be replaced across unmanned sites without losing telemetry or control?
Operational pain
Intermittent communications, seasonal access, shared gateway images, and limited staff make certificate expiry a physical operations problem.
Trigger
Issuer migration, certificate expiry, gateway replacement, or a vendor credential incident.
QNSI contribution
Connect the decision to a controlled security path
Group gateway certificates by site access, issuer, firmware, connectivity, redundancy, and rollback readiness in QNSI.
Decision artifact
A site-by-site rotation route with preloaded trust, outage coordination, validation call, and deferred-risk register.
What still requires validation
Operators test local control, telemetry continuity, alarm delivery, remote recovery, and water-quality safeguards.
External problem context
Primary sources
These sources establish the external requirement or risk context. They do not endorse HEOSSI or prove that QNSI completed this scenario.
Evidence boundary
What this page does—and does not—prove
This is a product evaluation pattern, not a customer case study, certification, legal opinion, regulator endorsement, or claim that a production deployment completed the described work.