![]() |
|
Keys with Mixed Security - Printable Version +- LogicMachine Forum (https://forum.logicmachine.net) +-- Forum: LogicMachine eco-system (https://forum.logicmachine.net/forumdisplay.php?fid=1) +--- Forum: Gateway (https://forum.logicmachine.net/forumdisplay.php?fid=10) +--- Thread: Keys with Mixed Security (/showthread.php?tid=6382) |
Keys with Mixed Security - skibbi - 08.04.2026 Hello, Just as a note upfront: I am writing this as a Wiser for KNX user, but I think this topic is best placed here. I think the way Data Secure keys are imported in LogicMachine/Wiser for KNX is somewhat suboptimal for projects with mixed security. Suppose you have group address 0/0/1 on TP line 1.1, where it is connected to non-secure devices. Additionally, you have LogicMachine/Wiser on TP line 1.0 with a secure dummy. If the line coupler has a Security Proxy, ETS will set up the group address 0/0/1 with mixed security: unencrypted on 1.1, but encrypted on 1.0. When you import the project into LogicMachine/Wiser, the object is created without a Data Secure key. I suspect it isn't easily deducible from the project export whether the group address is encrypted for LogicMachine/Wiser. Unfortunately, you consequently have to enter the keys manually for all mixed security group addresses, which is a rather cumbersome process. However, ETS offers a better way to handle this, which is incidentally also used by Home Assistant: you can run a key export on the group address associations of a dummy, which will then contain the exact keys that are securely linked to that dummy. Is this issue already known, and is a solution being worked on? RE: Keys with Mixed Security - Daniel - 08.04.2026 If you can share your ETS project to PM then we can have a look into this. You are the first asking this question. RE: Keys with Mixed Security - Daniel - 08.04.2026 KNX has mess this up in ETS. The groups are marked as non secure and this is why the key is not imported. As there is keys export feature we will add option to import them at once for this case(we don't know what is the topology). For you this makes no difference for now as you will have to wait for SE to release new fw one day. |