Valmet reports that it is supplying its DNAe DCS (distributed control system) as part of an upgrade project at ESE-Energia’s Pursiala combined heat and power plant in Mikkeli, Finland. The new system will replace an obsolete third-party system installed there.
As the main automation system, the Valmet DNAe DCS will be used to control the power plant’s three main boilers (CFB, BFB and a hot-water boiler), an electric boiler, a district heating accumulator, and fuel reception. The DNAe DCS ensures high availability and delivers advanced process controls, enhancing performance and reliability, says Valmet.
The new distributed control system is scheduled to be commissioned in spring 2026 and taken over by the customer in autumn 2026.
”About two years ago, we began investigating the features and user experience of various automation systems for a power plant of a similar scale to the Pursiala plant. After a thorough evaluation, we concluded that the automation system offered by Valmet is the most advanced and reliable,” said Mikko Turunen, Operations Manager at ESE-Energia Oy.
To “ensure optimal power generation and emissions control”, the installation will include Valmet DNA Steam Turbine Automation and Valmet DNA Advanced Process Controls (APC). The entire plant’s energy production is managed via the Valmet DNA Energy Management System. All safety-related systems are based on HIMA technology and integrated into the Valmet DNAe.
The power plant is controlled via the web-based Valmet DNAe user interface, with UX design methods employed to develop the new control environment.

ESE-Energia Oy is a regional energy company based in Mikkeli, with a 125-year history. The company produces, sells, and distributes heat and electricity, serving approximately 2500 district heating and 25 000 electricity distribution customers in the region. The Pursiala power plant produces approximately 100 GWh of electricity, 400 GWh of district heating, and 20 GWh of industrial steam annually, using wood (90%) and peat (10%) as fuel.
DNAe cybersecurity milestone
Valmet also reports that its Valmet DNAe distributed control system has achieved a significant milestone in industrial cybersecurity: it is the world’s first fully web-based system to receive the ISASecure System Security Assurance (SSA) Security Level 1 certificate.
The external assessment, conducted by exida*, ensured that Valmet DNAe meets the strict security requirements and levels specified in the ISA/IEC 62443-3-3 standard. The Valmet DNAe reference architecture networks were precisely evaluated, configured, and tested according to network topology and component requirements.
Introduced in 2024, Valmet DNAe takes a “modern and proactive approach to cybersecurity, enabling companies to effectively prevent and respond to evolving cyber threats.”
Valmet DNAe’s product development process was validated with Security Development Lifecycle Assurance (SDLA) certification in 2020, “ensuring that cybersecurity considerations are integrated into every stage of the system lifecycle,” the company says.
“We believe that building security into the very foundation of our systems is the most effective way to protect our customers in today’s evolving threat landscape,” says Jukka Ylijoki, Vice President of R&D, Automation Systems, Valmet. ”Valmet DNAe has now become the world’s first fully web-based DCS to reach system-level ISASecure SSA certification. The right technology decisions enable us to provide our customers with next-generation connectivity while elevating cybersecurity to new levels.”
For IT teams, Valmet DNAe provides centralised user management and Active Directory (AD) integration, enabling role-based access control and authentication. Additionally, the system offers authorisation, audit trails, secure communication, encryption mechanisms, content-signed software, and comprehensive logging.
To support enterprise-level visibility, Valmet says its DNAe distributed control system integrates with users’ Security Information and Event Management (SIEM) systems, providing valuable information to Security Operations Center (SOC) teams. Customers are supported by extensive Valmet Cybersecurity Services, the company says.
* exida is a global provider of functional safety, cybersecurity, alarm management services and certifications. It says it “partners with companies worldwide to offer expertise in safety and automation.”