BACnet/SC Network Overview
BACnet/SC networks consist of devices that support BACnet Secure Connect (BACnet/SC). The Secure Connect layer uses standard IT network protocols (WebSockets Secure and TLS) and BACnet/SC device certificates to enable peer authentication, message encryption, and reliable communication on the network.
BACnet Certificates
In BACnet Secure Connect, digital certificates are used for securing communication between BACnet devices. The certificates authenticate each device’s identity and encrypt data exchanges, ensuring that only authorized, trusted devices can communicate on the network. This enhances security, privacy, and data integrity in building automation systems.
To enable BACnet/SC communication, you need to create a certificate for the BACnet point manager and have it signed by the certificate authority (CA). The certificate files are stored in the ProgramData directory and imported into the channel configuration when you are configuring the BACnet/SC communication.
BACnet/SC Hubs
Devices on a BACnet/SC network use BACnet/SC hubs instead of communicating directly, although you can optionally set up a direct connection for selected devices.
A BACnet/SC hub can be an external hub connected to the network, or you can configure the channel to act as a BACnet/SC hub. Communication via BACnet/SC hubs eliminates broadcast messages and the need for extra hardware in each network segment (BACnet Broadcast Management Devices). It also increases resilience by supporting a redundant primary/failover connection.
What's Next?