Access Control for District Heating – Secure Access to Substations and Cabinets

Digital access control for district heating companies. Replace lockboxes with traceable access to heat substations, exchanger stations, and technical rooms.
4 min
Access Control for District Heating – Secure Access to Substations and Cabinets

District heating companies often have thousands of access points spread across large areas – from customer substations to exchanger stations and production facilities.

With new compliance requirements from CER and NIS2, lockboxes and shared codes are no longer sufficient. You must be able to document who had access when.


The Problem with Lockboxes

Many district heating companies still use lockboxes for substations:

❌ Shared code – Anyone with the code has access ❌ No traceability – Who opened the cabinet? ❌ Codes get shared – Often to external parties ❌ Rare code changes – Security risk ❌ Compliance breach – Cannot document access


SnapKey: Replace Lockboxes with Traceable Access

Key via QR code

Unique QR code on each cabinet. The technician scans it in the SnapKey app – optionally with a PIN code or MitID as an extra requirement – and gets a time-limited key to the cabinet's iLOQ lock.

Individual Traceability

Openings are logged with who, what and when, as the lock system reports them.

Time-limited Access

Give external contractors access only during the agreed time period.

Revocation from the dashboard

Stop access with one click. It takes effect when the lock system receives the change. For a phone key, typically within about 30 seconds.


Typical Locations

Customer Substations

Traditional: Lockbox with shared code With SnapKey: iLOQ lock and a personal digital key, issued via a QR code in the app

Exchanger Stations

Traditional: Physical key or code With SnapKey: Digital key with time-limited access for externals

Production Facilities

Traditional: Access card or key With SnapKey: eID/2FA for critical zones

Pump Stations

Traditional: Off-grid = no control With SnapKey: Offline access with battery-free iLOQ locks


How a key via QR code works

Technician at substation:

1. Scans the QR code in the SnapKey app
2. Enters the QR code's PIN, if it requires one
3. Gets a key to the lock
4. Opens with the key
5. The opening is logged when the lock system reports it

NIS2 and CER Compliance

SnapKey supports:

Requirement Traditional SnapKey
Access documentation Manual Automatic
Individual traceability No Yes
Time-limited access No Yes
Audit reports Manual work One click
Risk assessment Manual Data-driven

Example: a district heating company with 3,000 cabinets

An illustrative example, not a named customer.

Starting point:

  • 3,000 substations with lockboxes
  • 50 own technicians
  • 20+ external companies annually
  • No knowledge of who opened what

After SnapKey:

  • iLOQ lock and QR code on all cabinets
  • Technicians get keys via the QR code in the SnapKey app
  • Externals get time-limited access
  • Per-person log
  • Compliance report ready for inspection

Result: each opening the system registers is logged with the person and the time – the lockboxes are replaced by iLOQ locks.


Integration with Operations Systems

Through SnapKey's Public API and webhooks you can connect systems such as:

  • Work order systems – Automatic access when assigned a task
  • HR systems – Sync hires and departures
  • GIS systems – Geographic overview of access
  • SCADA – Link access data with operational data

FAQ

Do we need to replace all lockboxes?

Yes. The lockbox is replaced by an iLOQ cylinder or padlock; the QR code is used to issue the key.

Does it work offline?

The iLOQ locks validate the key in the cylinder and work without network; a phone key works offline within its offline validity period.

Can we give a plumber access to one specific cabinet?

Yes. You choose exactly which locations, and set a time window. The plumber receives access via SMS and can only open the selected cabinets.


Get Started

Is your district heating company ready to replace lockboxes with traceable access?