KNX Secure: What it is and how the Atios KNX Bridge supports it

KNX installations are increasingly connected to IP networks, remote access services and smart home platforms. This makes security more important than ever.

KNX Secure protects KNX installations against unauthorized access and configuration changes.

There are two different security mechanisms: KNX IP Secure and KNX Data Secure. They protect different parts of the communication, and the Atios KNX Bridge supports both.

KNX IP Secure: protecting KNX over IP

KNX IP Secure protects KNX communication over an IP network by allowing only authorized connections.

For example, when ETS or another KNX IP client (e.g. Home Assistant) wants to connect to the Atios KNX Bridge’s IP Interface, a user ID and password are needed for authentication. All telegrams are also encrypted over IP with a new key for every session, to ensure high protection with current cryptography standards. Without IP Secure, every device can access the KNX bus over the IP interface.

In practice, this means that commissioning and IP-based communication can be protected without changing how the KNX installation itself works.

KNX Data Secure: protecting what your building does

KNX Data Secure protects the commands sent between KNX devices. It encrypts the data and verifies where each command comes from, so a secure device can tell whether a message comes from an authorized device.

It also protects against replay attacks. In simple terms, someone who captures a valid command cannot simply send that same command again later to make something happen. This matters for functions such as door openers, access control and other critical building functions.

Data Secure is especially useful in places where the KNX bus could be physically accessible to other people, such as hotels, schools and public buildings.

The result: your KNX devices don’t just communicate securely, they can also trust the commands they receive.

Security that grows with your installation

Security is important to us. As cybersecurity becomes an increasingly important part of connected products, and new regulations such as the EU Cyber Resilience Act (CRA) raise the bar, we believe security should be built into the products we use every day.

That’s why we made KNX Secure available not only on new KNX Bridges, but also as an update for KNX Bridges that are already installed and working in the field.

You shouldn’t have to replace perfectly good hardware to benefit from enhanced security. Your existing KNX Bridge can evolve with your installation. Find out how to enable KNX Secure on an existing KNX Bridge.

The Atios KNX Bridge supports both KNX IP Secure and KNX Data Secure.