Focus topic

Cyber Resilience Act:
staying securely updatable.

Electronic devices must be securely updatable throughout their entire life cycle. SIO provides the update technology this requires, proven millions of times over — instead of costly in-house development.

Request a consultation

Go to software updates

Why now

A recommendation becomes an obligation.

The EU Cyber Resilience Act (CRA) subjects products with digital elements to clear security requirements: vulnerabilities must be handled, security updates must be provided and update processes must be reliably managed throughout the product life cycle. What many underestimate: a robust update solution is considerably more complex than it first appears.

SIO brings exactly this experience — from 25 years of functional safety in automotive electronics, transferred to industrial devices.

What the CRA requires

Security throughout the entire life cycle

Updatability throughout the product life cycle
Security patches for known vulnerabilities
Handling and reporting of vulnerabilities
Secure, repeatable update processes
Digital signatures & integrity protection
Protection against incorrect or tampered software versions
Safe behavior in the event of a power failure or an aborted update
Local and cloud-based update distribution

The SIO answer

Proven technology, not in-house development

The building blocks with which you can meet the CRA requirements in practice.

Secure update chain

Bootmanager, flashloader and recovery safeguard every step — even if an update is aborted or the power fails, the device remains in a defined state.

Signature & integrity

Encrypted, digitally signed flashware prevents incorrect or tampered software versions — authenticity and integrity can be verified.

Local · USB · over-the-air

The same proven technology — on site, via USB or as over-the-air distribution, including consistent updating of multiple modules.

FAQ

Common CRA questions

What does the Cyber Resilience Act mean for device manufacturers?

Products with digital elements must be capable of being operated and updated securely throughout their life cycle. This includes structured vulnerability handling, the provision of security updates and a secure, traceable update process.

Why is a secure update solution more complex than it seems?

An update must never leave a device in an undefined state. Error cases such as power failure, an aborted update or an incorrect software version must be handled safely — including signature verification, recovery and consistent updating of multiple modules.

What exactly does SIO provide for this?

A proven embedded update chain consisting of Bootmanager, Flashloader, Reprog and Testloader, complemented by signature and recovery mechanisms as well as PC and cloud tools. Deployable locally, via USB or over the air.

In-house development or ready-made solution?

Developing a robust update solution yourself ties up considerable resources and security expertise. SIO technology is used in more than 70 million ECUs in the field — which significantly shortens the path to a CRA-compliant solution.

CRA-compliant updates — let’s discuss your device.