Knx Secure - ABB i-bus KNX IPR/S 3.5.1 Product Manual

ABB i-bus ® KNX
Commissioning
3.5

KNX Secure

The ABB IP Router Secure is a KNX device according to the KNX Secure standard. In other words, the
device can be put into operation in a secure manner. Communication on the IP backbone is secure (all
KNX IP devices must support the KNXnet/IP Security protocol for this purpose), and the tunneling
connections are encrypted.
The following information must therefore be taken into account during device commissioning:
It is essential to assign a project password as soon as a KNX Secure device is imported into a project.
•
This will protect the project against unauthorized access.
The password must be kept in a safe place – access to the project is not possible without it
(not even the KNX Association or ABB will be able to access it)!
• A commissioning key is required when commissioning a KNX Secure device (first download). This key
(FDSK = Factory Default Setup Key) is included on a sticker on the side of the device, and it must
imported into the ETS prior to the first download.
o
o
o
The FDSK is required only for initial commissioning. The ETS then assigns new keys. The FDSK will be
required again only if the device was reset to its factory settings (e.g. If the device is to be used in a
different system with a different ETS project).
The ETS assigns the "backbone" key to all KNX IP Secure devices in the project, and also generates
separate passwords for each tunneling server. The passwords can be changed as required. ETS
generates and administers the keys. Keys and passwords can be exported as needed (e.g. if a client
would like to access one of the tunnels).
The Router can be reset to its factory settings if necessary, see chapter 2.4.5,
resetting to factory
On the first download of the device, a window opens in the ETS to prompt the user to enter the
key. The certificate can also be read using a QR scanner (recommended).
Alternatively, the certificates of all Secure devices can be entered in the ETS beforehand. This is
done on the "Security" tab on the project overview page.
Two FDSK stickers are applied on the device. One of them can be used for the project
documentation, and the other one can remain on the device.
Without the FDSK, it will no longer be possible to operate the device in KNX Secure mode
after a reset.
settings.
Unloading the device and
IPR/S 3.5.1 | 2CDC502099D0211 Rev. A 33