How to obtain a Software Bill of Materials (SBOM) for EBO

[StephenYang]

How to Obtain a Software Bill of Materials (SBOM) for EcoStruxure Building Operation

Issue

How can a Software Bill of Materials (SBOM) be obtained for an EcoStruxure Building Operation (EBO) release?

Product Line

EcoStruxure Building Operation

Environment

• Building Operation Enterprise Server
• Building Operation Enterprise Central
• Building Operation WorkStation

Cause

A Software Bill of Materials (SBOM) is a comprehensive inventory of software components used within a software product. It provides information such as component names, versions, libraries, modules, frameworks, and other software elements included in the final product.

SBOMs provide transparency into the software supply chain and support:

• Security by helping identify and address software vulnerabilities.
• Compliance by assisting with software licensing and open-source usage requirements.
• Supply Chain Management by providing visibility into software dependencies and component origins.
• Support and Maintenance by identifying the software components and versions included in a release.

An SBOM may include:

• Component inventory
• Licensing information
• Component version information

Resolution

Schneider Electric maintains and distributes SBOMs through a secure SBOM platform. Because software libraries and components can change between product releases, SBOMs are version-specific and may need to be generated upon request.

To obtain an SBOM for a specific EcoStruxure Building Operation release:

1. Contact your local Product Management or Account Management team and specify the exact EBO version required.
2. Customer onboarding begins after verification of the requestor's identity and receipt of a Non-Disclosure Agreement (NDA).
3. Access is provided through the Schneider Electric SBOM portal:
   https://sbom.se.comhttps://sbom.se.com
4. After the initial sign-in, the SBOM Operations team assigns the required permissions before SBOMs can be viewed or downloaded.

Additional Information

• If the requested SBOM is for a previous product version, generation may take up to four weeks after the request is submitted.
• Available download formats may include CycloneDX, SPDX, and PDF.
• For assistance with SBOM access or interpretation, contact sbom@se.com.

Keywords

SBOM, Software Bill of Materials, EcoStruxure Building Operation, EBO, software components, software supply chain, software compliance, software security, third-party components, open-source components, vulnerability management, CycloneDX, SPDX, Schneider Electric SBOM Portal