Access Control for Electricity Grid and Substations – CER & NIS2 Ready

Secure access to transformer stations, grid components, and technical rooms. Meet CER and NIS2 with battery-free, offline access control from SnapKey.
5 min
Access Control for Electricity Grid and Substations – CER & NIS2 Ready

The electricity grid is critical infrastructure of the highest importance. With the CER Directive and NIS2, there are now requirements for documented access control to all components in the power supply.

SnapKey delivers battery-free, offline access control that's perfect for transformer stations and grid components without power supply or internet.


Special Requirements for the Energy Sector

The energy sector faces unique challenges:

  • High voltage: Safety-critical zones require documented access
  • Many distributed locations: From substations to cable cabinets
  • Off-grid installations: No power = traditional locks don't work
  • Compliance pressure: Energy regulators, NIS2, CER, energy legislation
  • External suppliers: Many contractors need access

SnapKey + iLOQ for Electricity Grid

Battery-free Locks

iLOQ S5 is powered by smartphone NFC. Perfect for installations without power supply.

Works offline

The cylinder validates the key itself, without network. A phone key works offline within its offline validity period; cards and fobs work directly on the cylinder.

Traceability

Document who has been in each substation. Ready for regulatory inspections.

eID for Critical Zones

Require eID verification for high-risk areas. Extra security where it matters.


Typical Installations

Location Risk SnapKey Solution
High voltage stations High eID + time-limited access
Transformer kiosks Medium Battery-free lock + traceability
Cable cabinets Medium Key via QR code or NFC
Pole-mounted stations Low-medium Offline iLOQ access
Control rooms High Role-based + 2FA

Compliance: CER, NIS2, and Energy Regulations

CER Directive (EU 2022/2557)

  • Requires documentation of physical security
  • SnapKey provides automatic access logs

NIS2

  • Requires risk assessment and access control
  • SnapKey supports role separation and audit

Energy Legislation

  • Specific national legislation for the energy sector
  • SnapKey is built to meet the requirements

How Offline Access Works

Technician at substation without network:

1. Key downloaded to phone (when online)
2. At station: Hold phone to lock
3. NFC delivers power to the lock
4. Lock validates key locally (cryptographic)
5. Access granted/denied
6. Event stored in the lock
7. Log uploaded at next sync

Result: the openings the lock system reports are logged with the key and the person – also at remote sites, once the log has been uploaded.


Handling External Contractors

The energy sector often uses externals for:

  • Cable laying
  • Transformer maintenance
  • Cleaning and grass cutting
  • Meter replacement

Traditional:

  • Coordination of key handover
  • Risk of copying
  • No traceability
  • Keys returned (hopefully)

With SnapKey:

  1. Send time-limited access via SMS
  2. Contractor lets themselves in
  3. Access expires automatically
  4. Log of the openings the lock system reports

Example: a grid company with 500+ substations

An illustrative example, not a named customer.

Starting point:

  • 540 transformer kiosks and pole stations
  • 80 own technicians
  • 15+ contractor companies
  • Physical keys in circulation

Challenges:

  • No knowledge of who was where
  • Keys were copied
  • Manual documentation for inspections
  • Coordination with externals took days

With SnapKey:

  • All locations secured with iLOQ
  • Technicians have personal digital keys
  • Externals get time-limited access via SMS
  • Automatic compliance reporting

Results:

  • Openings reported by the lock system, logged with key and person
  • Compliance reports generated from the dashboard

Integration with SCADA and Operations Systems

SnapKey can integrate access data with:

  • SCADA systems – Link physical access with system events
  • DMS (Distribution Management) – View access in operations picture
  • HR systems – Automatic onboarding/offboarding
  • Work order systems – Access follows assigned tasks

FAQ

Can the locks handle outdoor conditions?

Yes. iLOQ S5 locks are IP68 certified and work from -40°C to +85°C. They are designed for harsh outdoor environments.

What if the phone runs out of power?

A phone key needs a working phone. As a backup, technicians can carry an iLOQ card or fob.

How is emergency access handled?

SnapKey supports emergency protocols with escalation and audit trail. Specific setup is agreed during implementation.

Can we see if someone attempts unauthorized access?

Yes. Refused attempts on the iLOQ locks are logged with key, lock and time. You can set up alarms for when a critical lock or key is used.


Get Started

Is your grid company ready for modern access control – and the new compliance requirements?