Skip to main content
SISCO

IEC 62351-9 Key Distribution

KDC Client

The SISCO KDC Client automates IEC 62351-9 compliant cryptographic key distribution to every IED on your substation network — enrollment, delivery, rotation, and renewal, without manual engineering work. It's the certified endpoint component that connects your IEC 61850 devices to a Garibaldi®-managed Key Distribution Center (developed by ecosystem partner PCItek), securing GOOSE and Sampled Values traffic end to end.

Request a Demo
Download Product Sheet
KDC Client: secure chip representing IEC 62351 key management

Automated Key Lifecycle

Policy-driven retrieval, delivery, rotation, and renewal reach every IED on schedule — no engineer required.

Secure Device Enrollment

IEDs authenticate before receiving keys, enforcing zero-trust at the device level.

High Availability / Failover

Built-in redundancy keeps key distribution running even if the primary server becomes unavailable.

What KDC Client Delivers

The KDC Client handles the full key management lifecycle so your engineering team doesn't have to touch it manually.

  • Automates the full key lifecycle — enrollment, delivery, rotation, and renewal — across every IED on the network
  • Secures GOOSE and Sampled Values traffic against injection and replay attacks
  • Enforces zero-trust device authentication before any IED receives keys
  • Integrates security configuration directly into your existing SCL engineering workflow — no separate toolchain
  • Supports role-based access control via RADIUS and certificate-based authentication
  • Provides audit-ready logging (OCSP, Syslog) to support NERC CIP compliance programs

Technical Specifications

The KDC Client implements IEC 62351-9 as published, working alongside 61850 PLUS and the broader SISCO protocol stack.
    • IEC 62351-9 (GDOI) — core key management protocol
    • IEC 62351-6 — security for GOOSE and Sampled Values multicast traffic
    • IEC 61850-8-1 — GOOSE messaging over MMS/ACSI
    • IEC 61850-9-2 — Sampled Values for protection and metering
    • IEEE 1588 (PTP) — standalone key management support for Precision Time Protocol security
    • Built-in high availability and failover for continuous key distribution

    Close the Key Management Gap

    See how the KDC Client automates IEC 62351-9 key distribution across your substation.

    Request a Demo