0
Merkzettel (0)
Home KNX-Solutions KNX Secure
Product finder Media centre Smart Metering LUXORliving

KNX Secure: Your security advantage in the smart home and smart building

Whether it's protecting privacy in the smart home or protecting sensitive data in the smart building, it is now more important than ever to prevent data theft and manipulation in networked building technology. And the EU Cyber Resilience Act, which will come into force in 2025, also requires high security standards for building automation components. This is where KNX Secure comes into play.

How does KNX Secure work?

KNX Secure adds an effective security component to the KNX standard. The KNX Secure technology is standardised in accordance with EN 50090-3-4. This blocks hacker attacks on the digital infrastructure of networked buildings, for example, and reduces the risk of digital break-ins.

KNX Secure fulfils the strongest encryption standards (according to ISO 18033-3, e.g. AES 128 CCM encryption) to achieve the highest level of data protection. In 2022, KNX Secure received the ‘Tested Information Security Smart Home and Building’ certification from the VDE. This certification emphasises that KNX installations are even better protected against possible cyber attacks.

Maximum protection is guaranteed on two levels:

KNX Data Secure

KNX Data Secure uses encryption and authentication to effectively protect user data against unauthorised access and manipulation. This effectively prevents attack scenarios such as telegram recording, telegram repetitions (replay attack) or modifications (man-in-the-middle attack). Protected are:

  • the commissioning of devices
  • access to the device configuration
  • Data exchange between the devices via groups, regardless of the KNX medium
  • the telegram part, which contains the user data (such as commands etc.)

KNX IP Secure

KNX IP Secure extends the IP protocol so that all transmitted telegrams and data are fully encrypted. Protected are:

  • All KNX data transmitted via IP/Ethernet
  • the bus system from access attempts via IP
  • the routing between KNX IP couplers
  • the tunnelling channels that provide KNX IP interfaces

Important tips for protecting your KNX installation

  • Systems in public areas where people can move around unobserved are particularly at risk. Wired KNX systems can also be vulnerable in this case.
  • Wireless KNX systems are the number one target for attacks, as communication between the devices is completely unprotected. We therefore strongly recommend the use of devices with KNX Secure.
  • If a system is connected to the Internet, the use of a VPN tunnel for access via the Internet is mandatory. When using a KNX Secure Tunnel interface, the strong passwords recommended by the ETS should be used and not replaced by your own weak passwords.
  • For a KNX IP backbone and other IP networks, VLAN separation must be used and communication between the KNX IP network and other networks may only take place via a suitable firewall.
TITLE_EN_GB does not exist

Valuable support from the KNX Association

To ensure the maximum security of your KNX installations, the KNX Association has created the KNX Secure Checklist. This describes step by step what needs to be considered for a secure KNX installation. In addition, the comprehensive KNX Secure Guide for Installers provides information on the current measures that can be used to increase the security of KNX systems. You can also check the protection of your installations with the KNX security check.

Learn more

Theben KNX products with KNX Data Secure and KNX IP Secure

Back in 2019, Theben was the first KNX provider to introduce KNX radio actuators in accordance with the Data Secure standard. Today, our product range includes over 60 TP and RF products that support KNX Data Secure. Our modular MIX-2 actuators are a speciality: thanks to the replaceable bus coupler, even MIX modules that are more than 10 years old can be retrofitted with KNX Data Secure!

All products are subject to the strict KNX certification process. This checks conformity with the AES128 authentication and encryption mechanisms. This means you can also be sure that our products fulfil the high requirements of the EU Cyber Resilience Act.

All Theben products with KNX Secure at a glance

Presence detector
o44071v3 LUXA 103 S360 12 KNX UP nn PI2

LUXA 103 S360-12

  • Presence detector (PIR) for flush-mounted ceiling installation indoors
  • 360° circular detection area, Ø 12 m (113 m2) at 3 m mounting height
  • For KNX bus system, 2 channels light and 2 channels presence for HVAC control
 Presence detector ceiling
o44072v3 LUXA 103 S360 28 KNX UP nn PI

LUXA 103 S360-28

  • Presence detector (PIR) for flush-mounted ceiling installation indoors
  • Rectangular detection area 360°, 28 x 5 m (140 m2) at 3 m mounting height
  • For KNX bus system, 2 channels light and 2 channels presence for HVAC control
 Presence detector ceiling
 o29510v3 theMura nn PI

theMura S180 KNX UP WH

  • Passive infrared motion detector for wall mounting flush-mounted
  • Rectangular detection area 170°, 14 x 17 m (238 m2) at 1.1 m mounting height
  • For KNX bus system
 Wall presence detector
 
o29510v3 theMura nn PI

theMura P180 KNX UP WH

  • Passive infrared presence detector for wall mounting flush-mounted
  • Rectangular detection area 170°, 14 x 17 m (238 m2) at 1.1 m mounting height
  • For KNX bus system
 Wall presence detector
 o29510v3 theMura nn PI

 theMura P180 2.20 KNX UP WH

  • Passive infrared presence detector for wall mounting flush-mounted
  • Rectangular detection area 170°, 16 x 10 m (160 m2) at 2.2 m mounting height
  • For KNX bus system
 Wall presence detector
 o44069v3 thePiccola KNX nn PI

 thePiccola P360 KNX DE WH

  • Passive infrared presence detector for ceiling mounting EN
  • Circular detection area 360°, Ø 8 m, (50 m2) at 2.5 m mounting height
  • For KNX bus system, 2 light channels and 2 presence channels for HVAC control
  Ceiling presence detector
 o38788v3 thePixa P360 KNX UP WH nn PI

thePixa P360 KNX UP WH

  • Optical sensor for ceiling mounting indoors
  • Rectangular detection area 360°, 7.5 x 10.5 m (79 m2) at 3 m mounting height, with up to 6 flexible detection zones
  Ceiling presence detector
 o40367v3 thePixa P360 KNX UP BK nn PI

thePixa P360 KNX UP BK

  • Optical sensor for ceiling mounting indoors
  • Rectangular detection area 360°, 7.5 x 10.5 m (79 m2) at 3 m mounting height, with up to 6 flexible detection zones
  Ceiling presence detector
   thePixa P360 KNX UP SF  Ceiling presence detector
 o41722v3 thePixa P360 24V KNX UP WH nn PI

thePixa P360 24V KNX UP WH

  • Optical sensor for ceiling mounting indoors
  • Rectangular detection area 360°, 7.5 x 10.5 m (79 m2) at 3 m mounting height, with up to 6 flexible detection zones
  Ceiling presence detector
 o41721v3 thePixa P360 24V KNX UP BK nn PI

thePixa P360 24V KNX UP BK

  • Optical sensor for ceiling mounting indoors
  • Rectangular detection area 360°, 7.5 x 10.5 m (79 m2) at 3 m mounting height, with up to 6 flexible detection zones
  Ceiling presence detector
   thePixa P360 24V KNX UP SF  Ceiling presence detector
     
REG actuators
o727v3 RMG 8 T KNX nn PI 

RMG 8 T KNX

  • REG 8/4-gang combination actuator 16 A 140 µF, KNX TP, Data Secure
  • Flexible channel function selection as switching or blind actuator, inrush current max. 800 A/200 µs, max. 600 W LED/channel
  • Base module MIX2
 Switching/ blind actuator
 o728v3 RMG4IKNX nn PI

RMG 4 I KNX

  • REG 4-gang switching actuator 16 A C-load 200 µF, KNX TP, Data Secure
  • With integrated current measurement per channel, inrush current max. 1500 A/200 µs, max. 850 W LED/channel
  • Base module MIX2
 Switching actuator
 o729v3 RMG8SKNX nn PI

RMG 8 S KNX

  • REG 8-gang switching actuator 16 A 140 µF, KNX TP, Data Secure
  • Manual operation and switching status LED per channel, inrush current max. 800 A/200 µs, max. 600 W LED/channel
  • Base module MIX2
  Switching actuator
 o724v3 RMG 4 U KNX nn PI

RMG 4 U KNX

  • REG 4-fach Schaltaktor 16 A 140 µF, KNX TP, Data Secure
  • Manuelle Bedienung und Schaltzustands LED je Kanal, Einschaltstrom max. 800 A/200 µs, max. 600 W LED/Kanal
  • Base module MIX2
  Switching actuator
 o259v3 BMG 6 T KNX nn PI

BMG 6 T KNX

  • REG 6-fold binary input, KNX TP, Data Secure
  • Multi-voltage inputs 10 - 240V AC/DC, integrated power supply unit 12V DC, 2 additional channels can be operated via buttons on the device
  • Base module MIX2
  Binary input
 o381v3 HMG 6 T KNX nn PI

HMG 6 T KNX

  • REG 6-fold heating actuator, KNX TP, Data Secure
  • With 6 integrated controllers, for controlling thermal actuators 24 - 240 V
  • Base module MIX2
  Heating actuator
 o401v3 JMG 4 T KNX nn PI

JMG 4 T KNX

  • REG 4-fold blind actuator 6 A, KNX TP, Data Secure
  • Copy function for quick parameterisation, for controlling drives for blinds, shutters, sun and privacy protection devices, roof hatches and ventilation flaps
  • Base module MIX2
  Blind actuator
 o405v3 JMG 4 24 T KNX nn PI

JMG 4 T 24V KNX

  • REG 4-fold blind actuator 6 A, KNX TP, Data Secure
  • Copy function for quick parameterisation, for controlling drives for blinds, roller shutters, sun and privacy protection devices, roof hatches and ventilation flaps
  • Base module MIX2
  Blind actuator
o312v3 DMG 2 T KNX nn PI

DMG 2 T KNX

  • REG 2-fold universal dimmer actuator 400 W, KNX TP, Data Secure
  • 5-400 W LED/channel, 800 W LED in parallel operation, for dimmable LEDs, incandescent and halogen lamps, energy-saving lamps, transformers, compact fluorescent lamps and fans
  • Base module MIX2
  Dimmer actuator
     o41719v3 SM 4 KNX nn PI

SM 4 KNX

  • REG, 4-gang switching/dimmer actuator 10 A 133 μF, KNX TP
  • For controlling electrical loads with 0-10 V or 1-10 V interface
  • Flexible Verwendung der Steuer- und Relaisausgänge
  Dimmer actuator
Radio actuators
o40777v3 SU 1 S RF KNX nn PI 

 SU 1 S RF KNX

  • Flush-mounted 1-fold wireless switching actuator 10A 130 μF, KNX RF, Data Secure
  • 2 binary inputs for potential-free contacts such as push-buttons, switches, temperature sensors
  • Extensive functions such as switching, staircase lighting, pulse function
   Radio switching actuator
 o44151v3 PS 1 RF KNX nn PI

PS 1 RF KNX

  • KNX push-button switch actuator module, KNX RF, Data Secure
  • 4 touch points
   Radio switching actuator
 o40769v3 HU 1 S RF KNX nn PI

HU 1 S RF KNX

  • Flush-mounted 1-fold radio heating actuator KNX RF, Data Secure
  • 2 binary inputs for potential-free contacts such as push-buttons, switches, temperature sensors
  • With integrated controller
  Radio heating actuator
 o42027v3 EU 1 S RF KNX nn PI

EU 1 S RF KNX

  • Flush-mounted 1-fold radio actuator for electric heaters 10 A KNX RF, Data Secure
  • Easy installation thanks to particularly compact housing
  • Secure commissioning and communication thanks to KNX Data Secure support
  Radio heating actuator
 o40770v3 JU 1 S RF KNX nn PI

JU 1 S RF KNX

  • Flush-mounted 1-fold radio blind actuator 5 A KNX RF, Data Secure
  • 2 binary inputs for potential-free contacts such as push-buttons, switches, temperature sensors
  • For controlling drives for blinds, shutters, sun and privacy protection devices, roof hatches and ventilation flaps
 Radio blind actuator  
 o44152v3 PJ 1 RF KNX nn PI

PJ 1 RF KNX

  • KNX push-button blind actuator module, KNX RF, Data Secure
  • 4 touch points
  Radio blind actuator 
 o40768v3 DU 1 S RF KNX nn PI

DU 1 S RF KNX

  • Flush-mounted 1-fold radio dimming actuator 250 W, KNX RF, Data Secure
  • 2 binary inputs for potential-free contacts such as push-buttons, switches, temperature sensors
  • For dimmable LED, incandescent and halogen lamps, energy-saving lamps and dimmable transformers
  Radio dimming actuator
 o44153v3 PD 1 RF KNX nn PI

PD 1 RF KNX

  • KNX push-button dimming actuator module, KNX RF, Data Secure
  • 4 touch points
  Radio dimming actuator
 o43748v3 DU 1 DALI S RF KNX nn PI

DU 1 DALI S RF KNX

  • Flush-mounted 1-fold DALI radio actuator, KNX RF, Data Secure
  • DALI-2 certified
  • Interface between the DALI and KNX bus systems
  Wireless DALI actuator
 o40783v3 TU 4 S RF KNX nn PI

TU 4 S RF KNX

  • Flush-mounted 4-gang radio push-button interface, KNX RF, Data Secure
  • 4 binary inputs for potential-free push-buttons
  • Additional binary input for connecting a temperature sensor
  Radio binary input
 o44154v3 PB 4 RF KNX nn PI

PB 4 RF KNX

  • KNX push-button module, KNX RF, Data Secure
  • 4 touch points
  Radio binary input
Flush-mounted actuators
 o24630v3 SU 1 KNX nn PI

SU 1 KNX

  • 1-fold flush-mounted switching actuator
  • Secure commissioning and communication through support of KNX Data Secure
  • 1x NO contact & 1x NC contact with common control
 Flush-mounted switching actuator
 o30633v3 HU 1 KNX nn PI

HU 1 KNX

  • 1-fold flush-mounted heating actuator
  • Secure commissioning and communication through support of KNX Data Secure
  • Silent control of 230 V AC thermal actuators
 Flush-mounted heating actuator
 o42024v3 EU 1 KNX nn PI

EU 1 KNX

  • Flush-mounted 1-fold actuator for electric heaters 16 A KNX TP, Data Secure
  • Easy installation thanks to particularly compact housing
  • Secure commissioning and communication thanks to KNX Data Secure support
 Flush-mounted heating actuator
 o24610v3 JU 1 KNX nn PI

JU 1 KNX 

  • 1-fold flush-mounted blind/switch actuator
  • Secure commissioning and communication through support of KNX Data Secure
  • For controlling drives for blinds, shutters, sun and privacy protection devices, skylights and ventilation flaps
 Flush-mounted blind actuator
 o24605v3 DU 1 KNX nn PI

DU 1 KNX

  • 1-fold flush-mounted universal dimming actuator
  • Secure commissioning and communication through support of KNX Data Secure
  • Optimised dimming output for dimmable energy-saving lamps, LEDs, incandescent and halogen lamps and dimmable transformers
 Flush-mounted dimming actuator
 o43746v3 DU 1 DALI KNX nn PI

DU 1 DALI KNX

  • Flush-mounted 1-fold DALI actuator, KNX TP, Data Secure
  • DALI-2 certified
  • Interface between the DALI and KNX bus systems
 Flush-mounted dimming actuator
DALI Gateways
o40767v3 DM 4 DALI KNX nn PI

DM 4 DALI KNX

  • 4-ways DALI actuator
  • DALI-2 certified
  • Interface between the DALI system and the KNX bus
 DALI Gateway
 o40765v3 DALI Gateway P64 KNX nn PI

DALI-Gateway P64 KNX

  • Multi-Master Application Controller as interface between the DALI system and the KNX bus
  • DALI-2 certified
  • Secure commissioning and communication through support of KNX Data Secure
 DALI Gateway
Push-button sensors
 o30636v3 iON 102 iON2 nn PI

iON 102 KNX

  • Push-button sensor with 2 buttons and 2 status LEDs with integrated temperature sensor
  • Secure communication with support of „KNX Data Secure“
  • For controling of the functions switching, dimming, blinds, value transmitter, operating mode, scene, color control, sequence
 Push-button sensor
 o30637v3 iON 104 iON4 nn PI

iON 104 KNX

  • Push-button sensor with 4 buttons and 4 status LEDs with integrated temperature sensor
  • Secure communication with support of „KNX Data Secure“
  • For controling of the functions switching, dimming, blinds, value transmitter, operating mode, scene, color control, sequence
 Push-button sensor
 o30638v3 iON 108 iON8 nn PI

iON 108 KNX

  • Room controller with integrated bus unit
  • Secure communication with support of „KNX Data Secure“
  • Access to the room controller via Bluetooth and operation with the IONplay app
 Push-button sensor
 o41678v3 iON 102 BK iON2 BK nn PI

iON 102 KNX BK

  • Push-button sensor with 2 buttons and 2 status LEDs with integrated temperature sensor

  • Secure communication with support of „KNX Data Secure“

  • For controling of the functions switching, dimming, blinds, value transmitter, operating mode, scene, color control, sequence

 Push-button sensor
 o41688v3 iON 104 BK iON4 BK nn PI

iON 104 KNX BK

  • Push-button sensor with 4 buttons and 4 status LEDs with integrated temperature sensor

  • Secure communication with support of „KNX Data Secure“

  • For controling of the functions switching, dimming, blinds, value transmitter, operating mode, scene, color control, sequence

 Push-button sensor
 o41699v3 iON 108 BK iON8 BK nn PI

iON 108 KNX BK

  • Room controller with integrated bus unit

  • Secure communication with support of „KNX Data Secure“

  • Access to the room controller via Bluetooth and operation with the IONplay app

 Push-button sensor
 o41682v3 iON 102 SR iON2 SR nn PI

iON 102 KNX SR

  • Push-button sensor with 2 buttons and 2 status LEDs with integrated temperature sensor

  • Secure communication with support of „KNX Data Secure“

  • For controling of the functions switching, dimming, blinds, value transmitter, operating mode, scene, color control, sequence

 Push-button sensor
 o41693v3 iON 104 SR iON4 SR nn PI

iON 104 KNX SR

  • Push-button sensor with 4 buttons and 4 status LEDs with integrated temperature sensor

  • Secure communication with support of „KNX Data Secure“

  • For controling of the functions switching, dimming, blinds, value transmitter, operating mode, scene, color control, sequence

 Push-button sensor
 o41710v3 iON 108 SR iON8 SR nn PI

iON 108 KNX SR

  • Room controller with integrated bus unit

  • Secure communication with support of „KNX Data Secure“

  • Access to the room controller via Bluetooth and operation with the IONplay app

 Push-button sensor

 

ON 108 KNX SR

Motorised actuator
o40762v3 CHEOPS S KNX nn PI

CHEOPS S KNX

  • Motorised KNX actuator for heating and cooling valves

  • Integrated temperature sensor

  • Integrated controller for efficient heating and cooling with one additional stage each

 Motorised actuator
System devices
o30625v3 IPsecure Router KNX nn PI 

IPsecure Router KNX

  • Router/interface/line coupler IP and KNX

  • For data exchange between KNX and IP networks

  • Support of KNX IP Secure

 System devices
 o38327v3 IPsecure Interface KNX nn PI

IPsecure Interface KNX

  • Interface IP and KNX

  • Support of KNX IP Secure

  • Meets the requirements of the KNXnet/IP standard

 System devices
 o29477v3 LUXORliving RF1 nn PI

 Media coupler TP-RF KNX

  • Connects KNX RF devices of one radio line with the KNX bus twisted-pair

  • Power supply via KNX bus voltage

  • Supports long frames for "KNX Secure" and enables faster download of large applications in parallel

 System devices