A method for establishing a secure connection from a service technician to a component experiencing a failure in an automation environment which is at least one of remotely diagnosable and remotely maintainable, wherein a service certificate is required for establishing the secure connection, the method comprising:
- transmitting, when the failure in the automation environment occurs, a one-time password to a service technician responsible for the component experiencing the failure at least one of (i) over a separate communication path and (ii) by a first message;
- setting up a secure initial connection from the service technician responsible for the component experiencing the failure to the automation environment based on the one-time password;
- transmitting a service certificate required for establishing the secure connection from the automation environment to the service technician responsible for the component experiencing the failure via said secure initial connection;
- and
- establishing the secure connection from the service technician to the component experiencing the failure using the service certificate.