The First Controller Certified to O-PAS

ASRock Industrial's iEP-5010G-010 industrial IoT controller has become the first product certified under the Open Group's O-PAS Certification Program, tested against the second edition of the O-PAS Standard. It was verified for the Redfish OSM-003 system management profile and the PP-003 regulatory physical platform profile, with independent verification by Enterprise Transformation Partners and IECEE organisations, and is separately certified to IEC 62443-4-2 for component cybersecurity in industrial automation and control systems. The controller is built on an Intel Atom x6425RE processor. James Lee, chairman of ASRock Industrial, and Aneil Ali, director of the Open Process Automation Forum at the Open Group, are quoted; the Forum described the certification programme as a milestone for the process automation industry.

The significance is in the word "first" and in what O-PAS is trying to do. Process control has been a vertically integrated market for its entire history: a DCS is bought as a system, its controllers, I/O, engineering tools and operator stations come from one vendor, and replacing any part of it means replacing the whole. O-PAS is an attempt by end users — the effort was driven by ExxonMobil and other large operators — to define interfaces such that controllers, I/O and applications from different vendors can be combined, and such that the application outlives the hardware it runs on.

A certification programme is what turns that from an aspiration into a procurement instrument. A standard without conformance testing produces products that claim compliance and interoperate imperfectly; a certificate from an independent test body is something a purchasing specification can reference. That is why the first certified product matters more than its own specification does — the controller itself is a modest Atom-based device, and its importance is that the conformance pathway now demonstrably exists.

The realistic view for anyone running process plant is that this changes nothing this year and may change a great deal over a fifteen-year horizon. Existing DCS installations are not going to be replaced, and the first O-PAS deployments will be greenfield units or standalone packages rather than core control. What is worth doing now is cheap: when specifying new control equipment, ask whether it is O-PAS certified and to which profiles, and record the answer. The value of that question is not that the answer will be yes in most cases today, but that asking it consistently is how a market converges — and the IEC 62443-4-2 certification alongside it is a reminder that component-level security certification is arriving in the same procurement documents.