smartbuildingmag.com
06
'26
Written on Modified on
Intesis Launches First KNX Secure Portfolio for HVAC Integration
Intesis has introduced the first KNX Secure gateway portfolio to enable encrypted, authenticated communication between HVAC systems and building automation networks.
www.hms-networks.com
As building automation systems integrate into wider IT infrastructures, regulatory developments such as the European Cyber Resilience Act (CRA) are necessitating standardized cybersecurity for connected devices. Intesis has addressed these requirements by implementing KNX Data Secure protocols, ensuring that HVAC integration meets current encryption and authentication standards.
Secure HVAC Integration and Interoperability
The new portfolio facilitates bidirectional, encrypted communication between HVAC units and KNX Secure installations. These solutions are configured via the Engineering Tool Software (ETS), allowing for standard-compliant deployment in professional building projects. Key offerings include:
- Brand-Specific Gateways: Secure integration for Mitsubishi Electric air conditioning, ventilation, and Ecodan air-to-water heat pump systems.
- Universal IR Gateway: A secure interface for infrared-controlled air conditioning units, applicable in retrofit and mixed-vendor environments.
- Certification Alignment: Ongoing development of interfaces aligned with KNX Data Secure certification requirements to maintain full control, monitoring, and diagnostic capabilities.
Meeting Market and Regulatory Demands
The transition toward KNX Data Secure compliance addresses the increasing requirement for system integrators to deliver secure residential, hospitality, and commercial installations. This portfolio supports the industry shift toward treating HVAC systems with the same cybersecurity priority as other connected building components. By combining manufacturer collaboration with standardized ETS configuration, these interfaces enable secure multi-room and multi-zone control without compromising interoperability or project flexibility.
Technical Analysis and Utility
The implementation of KNX Data Secure at the gateway level is a critical evolution for building service engineers. By providing encryption at the protocol level (Data Link Layer), Intesis mitigates risks associated with unauthorized telegram injection or "man-in-the-middle" attacks that could compromise climate control systems. For technical planners, the use of standard ETS for configuration is significant, as it removes the need for proprietary security tools and ensures that secure HVAC nodes are managed within the same database as the rest of the KNX installation.
Regulatory Impact and Standards
The move toward encrypted HVAC communication is a direct response to the Cyber Resilience Act (CRA), which mandates "security by design" for hardware and software products in the EU. Intesis is positioning these gateways as a bridge between high-cycle-rate HVAC proprietary protocols and the secured KNX backbone. This ensures that even if an HVAC unit uses a simpler internal communication method, the external data exchange across the building’s primary network remains compliant with modern cybersecurity frameworks.
Edited by Romila DSilva, Induportals Editor, with AI assistance.
The transition toward KNX Data Secure compliance addresses the increasing requirement for system integrators to deliver secure residential, hospitality, and commercial installations. This portfolio supports the industry shift toward treating HVAC systems with the same cybersecurity priority as other connected building components. By combining manufacturer collaboration with standardized ETS configuration, these interfaces enable secure multi-room and multi-zone control without compromising interoperability or project flexibility.
Technical Analysis and Utility
The implementation of KNX Data Secure at the gateway level is a critical evolution for building service engineers. By providing encryption at the protocol level (Data Link Layer), Intesis mitigates risks associated with unauthorized telegram injection or "man-in-the-middle" attacks that could compromise climate control systems. For technical planners, the use of standard ETS for configuration is significant, as it removes the need for proprietary security tools and ensures that secure HVAC nodes are managed within the same database as the rest of the KNX installation.
Regulatory Impact and Standards
The move toward encrypted HVAC communication is a direct response to the Cyber Resilience Act (CRA), which mandates "security by design" for hardware and software products in the EU. Intesis is positioning these gateways as a bridge between high-cycle-rate HVAC proprietary protocols and the secured KNX backbone. This ensures that even if an HVAC unit uses a simpler internal communication method, the external data exchange across the building’s primary network remains compliant with modern cybersecurity frameworks.
Edited by Romila DSilva, Induportals Editor, with AI assistance.
