LK-IP/KNXs
REG
Operating Manual
21
LK-IP/KNXs REG
90403
6.4.5
Device certificate
ETS requires a device certificate for each device with KNX Security that is created in the ETS. This
certificate contains the serial number of the device as well as an intangible key (FDSK = Factory
Default Setup Key).
The certificate is printed as text on the device. It can also be conveniently scanned from the printed
QR code via a webcam.
The list of all device certificates can be managed in the ETS Overview –> Projects –> Security
window.
This initial key is required to safely put a device into operation from the start. Even if the ETS down
-
load is recorded by a third party, the third party has no access to the secured devices afterwards.
During the first secure download, the initial key is replaced by the ETS with a new key that is gener
-
ated individually for each device. This prevents persons or devices who may know the initial key
from accessing the device. The initial key is only reactivated after a master reset.
The serial number in the certificate enables the ETS to assign the correct key to a device during a
download.
