Devices & Security – KNX Association

The following effects occur when the status of the device security changes in connection with KNX Secure in the ETS project.

The device security will be disabled

During the next download, the KNX Secure device will no longer be loaded securely (= plain commissioning).
The KNX Secure device device key will be reset.
The passwords of the KNX Secure device(s) will be reset in the project (also for additional, secure interfaces).
The KNX Secure is then disabled for run time as of the next device download (download is only possible if the device is present in the topology and is not parked or has no assigned individual address).

The final status of the KNX IP Secure is influenced in dependence on the setting for its security in the topology.

Topology/ Security Mode	Action/ Comment
Automatic	If there are still (other) devices with the security status enabled in the topology --> KNX IP Secure/ status of the security on the topology becomes disabled, security key will be deleted Otherwise, no action
Off	No action
On	The device will be parked and thus effectively removed from the KNX IP Secure network (the device address is deleted) --> KNX IP Secure/ status of the security remains enabled The individual address of the device in this state as of now can no longer be redefined/reassigned!

The KNX IP Secure is influenced in dependence on the setting for its security on the group address.

Group Address/ Security Mode	Action/ Comment
Automatic	Links of this device to object(s) with the security status enabled are removed For all others, no action
Off	Links of this device to object(s) with the security status enabled could not have existed (security on the GA is Off), therefore, no action
On	Links of this device to object(s) with the security status enabled are removed

During the next download, the KNX Secure device will be loaded securely (= secured commissioning).
The project password must be set (if there is none).
Device passwords (e.g. device key or for additional secure interfaces) are generated and set.
The KNX Secure is then enabled for run time as of the next device download (download is only possible if the device is present in the topology and is not parked or has no assigned individual address).

The KNX IP Secure is modified in dependence on the setting for its security in the topology.

Topology/ Security Mode	Action/ Comment
Automatic	If there are then only KNX IP Secure devices in the topology --> KNX IP Secure/ status of the security on the topology becomes disabled, security key will be generated. Otherwise, no action
Off	No action
On	The device cannot have been present in the topology (device security was Off), therefore, no action.

The KNX IP Secure is influenced in dependence on the setting for its security on the group address.

Group Address/ Security Mode	Action/ Comment
Automatic	If there are then only object(s) with the security status enabled present on the group address --> KNX Data Secure/ status of the security on the group address activation is attempted and a security key is generated as needed. Otherwise, no action
Off	No action
On	Links of this device to object(s) with the security status enabled could not have existed (device security was Off), therefore, no action