Frequently Asked Questions KNX SECURE

Must a KNX Secure device be set up in secure mode?

NO

All devices are delivered in unsecured mode. Secure setup can be enabled or disabled in the ETS®.

Must group telegrams for KNX Secure devices always be transmitted encrypted?

NO

In the ETS®, you can define encrypted or unencrypted conventional transmission for each group address and each group telegram created from it. To do so, secure mode is enabled or disabled in the settings. If you select „Automatic“, the ETS® decides on its own whether secure mode is possible or not. Secure mode can be established if all participating devices support KNX Secure and are set up in secure mode.

Can earlier KNX devices communicate with later KNX Secure devices?

YES

KNX Secure mode must then be disabled for the corresponding group addresses.

Can KNX Secure devices set up in secure mode be re-parameterized later on?

YES

This requires a reset to the factory settings (Factory Reset). Proceed as follows: Disconnect the bus connector / Press and hold the programming key / Connect the bus connector / Programming LED lights up / Release the programming key / Wait until the programming LED extinguishes (approx. 5 sec.) / Device is now reset to its factory settings.

Does secure setup require extra effort?

YES

Only minimum effort is required, however. All QR codes of the products used must be uploaded into the ETS®. This is done using the camera integrated into the notebook or a USB camera connected to it. The set-up time for each device increases slightly. For Lingg & Janke devices, the additional time required is approx. 10 – 20 sec. In unsecured mode, approx. 30 sec. are needed for the download. This means a total time of approx. 40 – 50 sec. for the secure setup of each device is required.

Does a KNX Secure installation require additional maintenance effort?

NO

However, the availability of the corresponding ETS® project is a prerequisite. If the ETS® project is open, all telegrams in the ETS® can be displayed and recorded unencrypted. There is practically no difference to a conventional KNX installation.

Can the keys of an ETS® project be exported?

YES

You can create an XML file with all keys used in this project. This “keyring” file must be protected by a password.

Is there any means of visualizing KNX Secure?

YES

Lingg & Janke offers a matching KNX visualization tool that supports KNX Secure standard. The keys required are transmitted in the “keyring” file.

Should KNX Secure only be used if so required by the customer?

NO

An encrypted KNX project provides optimal project security for the installer or system integrator as well.

Does KNX IP Security provide sufficient security for an entire KNX installation?

NO

KNX IP Security provides security on the IP network only. All telegrams on the remaining parts of the KNX bus are unprotected. However, the reverse does not apply: If KNX Data Security is used, all telegrams on the KNX bus are secure, including those transmitted via the IP network.

Can I modify a KNX Secure installation if the corresponding ETS® project is no longer available?

NO

Without the corresponding ETS® project containing all keys, you can neither re-parameterize devices nor add any devices. If this was an option, the installation would not be secure. The only way to go is to reset all devices to their factory settings and to set them up again