IPsecure Interface KNX
Commissioning
26
3.5
KNX Secure
The Theben IPsecure Interface is a KNX device according to the KNX Secure standard. In other words, the device
can be put into operation in a secure manner and the tunneling connections are encrypted.
The following information must therefore be taken into account during device commissioning:
•
It is essential to assign a project password as soon as a KNX Secure device is imported into a project. This will
protect the project against unauthorized access.
The password must be kept in a safe place – access to the project is not possible without it (not even the
KNX Association or Theben will be able to access it
)!
•
A commissioning key is required when commissioning a KNX Secure device (first download).
This key (FDSK = Factory Default Setup Key) is included on a sticker on the side of the device,
and it must imported into ETS prior to the first download.
o
On the first download of the device, a window opens in ETS to prompt the user to enter the key. The cer-
tificate can also be read using a QR code scanner (recommended).
o
Alternatively, the certificates of all Secure devices can be entered in ETS beforehand.
This is done on the “Security” tab on the project overview page.
o
Two FDSK stickers are applied on the device. One of them can be used for the project documentation,
and the other one can remain on the device.
Without the FDSK, it will no longer be possible to operate the device in KNX Secure mode after a
reset.
The FDSK is required only for initial commissioning. ETS then assigns new keys.
The FDSK will be required again only if the device was reset to its factory settings (e.g. If the device is to be used
in a different system with a different ETS project).
ETS generates separate passwords for each tunneling server. The passwords can be changed as required.
ETS generates and administers the keys. Keys and passwords can be exported as needed (e.g. if a client would like
to access one of the tunnels).
The interface can be reset to its factory settings if necessary; see chapter
Unloading the device and resetting to
.
