Industries · Utilities

Physical access governance for utilities

Thousands of unmanned sites. One governance model. Key2XS connects the IAM you already run to the keys already on your assets.

Thousandsof lockable objects, one estate
< 2 hrsstandard integration, live
99.99%platform availability
CER + NIS2audit-ready evidence
The problem

The key is the entire security model

Nobody checks a badge at a transformer station. Four everyday realities make that model fragile.

Shifting patterns

Access needs change faster than key administration follows.

Contractor churn

People change per project. Keys outlive the contract.

On-call breadth

Standby keys open everything, and nobody dares narrow them.

Revocation by mail

Accounts close centrally. Keys come back eventually, sometimes.

Every one of those keys opens infrastructure whose failure makes the news.

How it works

Access that follows the identity

Middleware between your IAM and your locking system. Follow one field engineer through four events.

On-call rotation active
Region North Region South

Audit trail
09:14:02GRANTsubstation-noord-12role maintenance-north
09:14:02GRANTts-veldweg-3role maintenance-north
09:14:03GRANTps-dijkring-7role maintenance-north
11:40:57REVOKEcabinet-a114contract ended, auto
11:40:58LOGblacklist scheduledestate policy
17:03:11REVOKEall sites (24)leaver, HR event
17:03:11LOGevidence sealedaudit chain
chain intact · tamper-evident
CER and NIS2

Answers from a system, not a reconstruction

CER names energy and drinking water as critical sectors. NIS2 covers access to premises. Auditors ask three questions.

Who can enter this substation, right now?Live, per identity, role and approval.
How fast is access withdrawn for a leaver?In the same movement as the accounts.
Show a year of changes for this site.One tamper-evident trail. Minutes, not days.
Mechanics

Governance that survives being offline

A substation sees a key long before it sees a network. Rights travel with the key, and a withdrawal is enforced at the next key update.

How rights travel

Control planethe decision
The keycarries the rights
The lockno power, no network

The next time the key is used or updated it picks up its new rights. Revocation propagates the same way.

What happens on withdrawal

Right withdrawnin the control plane
revocation window
Enforced at the keynext update or check
Closed by the key system's own offline logic
Validity expiryBlacklist checkOnline update

Near real time, not instantaneous. Each key system closes the window with its own mechanism; Key2XS makes the decision centrally and logs the change.

Works with what you run

Identity decides. Policy governs.
Technology executes.

Middleware through standard interfaces. Locks, keys and the locking plan stay as they are.

Identity side
SailPointCertified partner Microsoft Entra ID Okta One Identity Manager OpenText Identity Manager
Key2XS

Identity decisions become access rights, with evidence.

Locking side
iLOQ ASSA ABLOY CLIQeCLIQ · PROTEC², certified ASSA ABLOY AccessASSA ACCESS · ASSA CUMULUS · ASSA PULSE ASSA ABLOY Traka
FAQ

Utilities, answered

Our assets are spread across the whole region. Does that matter?

No. Key2XS governs access rights centrally, regardless of how dispersed the locks are. Digital key systems like iLOQ, CLIQ and Traka are designed for exactly such estates, and Key2XS adds the identity layer on top.

Can we give contractors time-limited access?

Yes. Access follows the assignments and end dates in your IAM system. When the contract or project assignment ends, the corresponding access rights are withdrawn automatically and the change is logged.

Does this help with CER and NIS2 audits?

Yes. Key2XS produces a continuous, tamper-evident audit trail linking every physical access right to an identity and a policy decision, so audit questions about physical access are answered in minutes instead of days.

Do we have to replace our locks or keys?

No. Key2XS is middleware. It orchestrates access rights through the standard interfaces of your existing key systems: iLOQ, ASSA ABLOY CLIQ, ASSA ABLOY Access or Traka. Locks, keys and the locking plan stay as they are.

How long does implementation take?

A standard integration is live in under two hours, through pre-built connectors, with no custom development required from your team.

See it on your infrastructure

A guided walkthrough of how identity, policy and physical keys come together across a dispersed estate.