Various embodiments are described in connection with auto-detection capabilities of a device in an industrial environment. The device can behave differently in a secured environment than it would in an unsecured environment. If in a secured environment, the device can obtain an auto configuration policy to control the device's security configuration from a security authority, for example. The device can configure itself based on the policy. Both secured-by-default and open-by-default can be supported based on the environment. According to some embodiments, needed security domain specific knowledge can be reduced, which increases the number of maintenance personnel that can add or replace a device in a secured system.