Inductive Automation is committed to Ignition 2027 being fully CRA conformant before the December 11, 2027 application date, with a CE mark and a publicly accessible EU declaration of conformity. Ignition is already developed under an IEC 62443-4-1 certified Software Development Lifecycle.
The Cyber Resilience Act (Regulation (EU) 2024/2847) places its obligations on the manufacturer, not on the companies operating the product.
Ignition 8.1 and 8.3 were placed on the market before December 11, 2027 and are outside the CRA’s product requirements. Existing installations keep running in production and support lifecycles are unchanged (8.1 limited support through September 2029, 8.3 through September 2032). There is no obligation to upgrade. After December 11, 2027, the license sold for EU use is Ignition 2027 or newer, which also serves as the expansion and upgrade path for existing 8.3 systems.
CRA conformity is assessed against a defined configuration. EU customers deploying Ignition 2027 or newer are expected to complete the upcoming Ignition Security Hardening Checklist, a short set of steps within the Security Hardening Guide. For 8.1 and 8.3, the Hardening Guide remains recommended practice.
This post is general guidance, not legal advice.