BLACKPIQ / POST-QUANTUM IPsec

Post-quantum IPsec.
Locked to the port.

Protect industrial Ethernet with a post-quantum IPsec tunnel using optional hybrid ML-KEM key establishment, plus physical locking at the controller.
Hybrid ML-KEM / Encrypted IPsec / Port locking
*Optional hybrid ML-KEM-768/1024 in Standard Mode. Both endpoints must support and enable the selected profile.
The supplied BlackPiQ product photo shows the device physically secured to the controller. A highlighted post-quantum IPsec tunnel connects a compatible control-center gateway to BlackPiQ, with optional hybrid ML-KEM and classical key establishment.
The supplied BlackPiQ product photo shows the device physically secured to the controller. A highlighted post-quantum IPsec tunnel connects a compatible control-center gateway to BlackPiQ, with optional hybrid ML-KEM and classical key establishment.
BLACKEDGE / SECURE REMOTE CONSOLE ACCESS

Remote access.
Physical control.

Connect authorized operators to critical RS232 consoles with SSH or HTTPS, strong authentication and physical port security.
SSH & HTTPS / MFA & AAA / Tamper alerts
Simplified BlackEdge diagram: remote operator connects by SSH or HTTPS over Ethernet to BlackEdge, physically locked to a router or switch RS232 console. Optional TACACS+ or RADIUS AAA is a separate side connection.
Simplified BlackEdge diagram: remote operator connects by SSH or HTTPS over Ethernet to BlackEdge, physically locked to a router or switch RS232 console. Optional TACACS+ or RADIUS AAA is a separate side connection.
BLACKVAULT HSMs / HARDWARE KEY PROTECTION

Protect the keys.
Keep control.

Generate, safeguard and manage cryptographic keys in protected hardware for enterprise applications and critical infrastructure.
Key generation / Tamper response / Access control
BlackVault HSM touchscreen model with inserted smart card, shown as the example for the BlackVault HSM family.
BLACKVAULT TOUCHSCREEN
HSM / HSM.TAC / HSM.RAS
BLACKSER AES / SERIAL DATA ENCRYPTION

Encrypt serial data.
Protect operations.

Add AES-256 protection to existing RS232 communications serving RTUs, PLCs, meters and protective relays.
RS232 / Modbus · DNP · IEC101 / Inline encryption
BlackSER AES inline RS232 serial data encryptor, front view.
AES-256
SERIAL DATA PROTECTION
RS232
EXISTING SERIAL ASSETS
INDUSTRIAL CONTROL SYSTEM PROTECTION

Critical control.
Post-quantum IPsec.

Protect PLCs, RTUs and IEDs with an optional hybrid post-quantum IPsec tunnel, physically locked to the industrial controller by BlackPiQ.
Hybrid ML-KEM / PLCs · RTUs · IEDs / Port locking
*Optional hybrid ML-KEM-768/1024 in Standard Mode. Both endpoints must support and enable the selected profile.
The supplied BlackPiQ and controller photo with a highlighted post-quantum IPsec tunnel terminating at BlackPiQ and physical protection at the controller Ethernet port. Hybrid ML-KEM key establishment is optional and requires a compatible configuration at both endpoints.
previous arrowprevious arrow
next arrownext arrow
PlayPause
Slider

Utilities

Engage products are used by public and private utilities to ensure the reliable and cost effective transport of critical information. Whether it’s redundant data center connectivity, migration from end of life circuits to packet networks, or making networks more secure; Engage helps Utilities meet the challenges of continuous power delivery, and NERC recommendations and standards.

Our products provide the Utility industry with innovative and cost effective solutions that connect network elements, protect critical circuits and secure network traffic and cryptographic keys. We have a quarter-century of experience developing, manufacturing, and supporting solutions that are critical to our customer’s operations.

Utilities

Highlighted Solutions

Migrate RTU / Data Center circuits to packet network with minimal disruption

• Opportunity: Large Utility to convert RTU / Data Center circuits to packet network with automatic switchover between multiple Data Centers.

• Solution: Saved CAPEX and OPEX by retaining existing RTUs using Engage IP•Tube Serial to packet converters with automatic protection switching and SCADA protocol transparency.

• Result: Highly resilient RTU / Data Center packet network cost effectively deployed and fully operational in short period of time.

Secure and reliable transport of critical power station notifications

• Opportunity: Convert “in the clear” government power station alert notifications from aging circuits to encrypted packet network.

• Solution: Able to encrypt serial alert data and convert it into packets with the Engage Black-Tube, minimizing the amount of equipment required and lowering overall project cost.

• Result: Reliable packet delivery of critical alerts, secured by powerful 256 bit key encryption; all provided in one integrated solution.

Cost effective radio traffic backhaul over fiber network

•Opportunity: Move backhaul of T1 radio traffic from expensive leased circuits to internal fiber network of regional utility.

•Solution: Convert T1 radio traffic to packets with Engage IP•Tube circuit to packet central site and remote products.

•Result: Leased lines retired and backhaul traffic transiting reliable fiber network.

 

What Utilities Say About Us

“We can bring up sites using Conitel at 1200 BPS, and sites using DNP3 at 9600 BPS, without any configuration changes or special equipment. Engage calls this transparent SCADA transport. I call it amazing.”

- Network Engineer
Southern Utility

Engage logo 990000 rev 2.000
9565 Soquel Drive Dr,
Aptos, CA 95003
 
Telephone: +1-831-688-1021
Toll Free : +1-877-ENGAGE4
​Designed, Fabricated, and Assembled
in America icon
Supported Worldwide

© 1989-2025 Engage Communication, Inc. All Rights Reserved.