How to set up KNX Secure with Thinka
KNXKNX Secure with Thinka — Setup Guide
This guide explains how to enable KNX Secure so that Thinka can read and write encrypted (secure) group addresses on your KNX installation.
- Prerequisites
> ETS with your secure project open.
> Thinka connected to the KNX bus.
> You know Thinka's individual address (shown in Thinka under *Settings → KNX*).
- Step 1 — Add a KNX Secure dummy device
In the ETS Catalog, search for dummy secure and add the Albrecht Jung "Dummy Secure" device.
- Step 2 — Give the dummy Thinka's individual address
Add the dummy to your line, then in Properties set its Individual Address to the same value as Thinka (here `1.1.33`).
This is the key step: Thinka sends and receives its secure telegrams from this address, so the dummy must carry exactly the same one.
Why this is needed : KNX Secure devices only accept telegrams from senders authorized in your ETS project. Adding a KNX Secure "dummy" device with Thinka's individual address authorizes Thinka, and the exported keyring provides the keys it needs.
Why this is needed : KNX Secure devices only accept telegrams from senders authorized in your ETS project. Adding a KNX Secure "dummy" device with Thinka's individual address authorizes Thinka, and the exported keyring provides the keys it needs.
- Step 3 — Associate your secure group addresses
Link the secure group addresses Thinka needs to control or read to the dummy device's group object(s) — everything Thinka should switch, dim, set, and read back (switching, dimming, value, status, etc.). Secure group addresses are marked with the shield icon.
> Important: After associating the addresses, download the affected receiver devices (e.g. the dimming actuator). The download is what writes Thinka's address into their authorized-sender tables. Until those devices are downloaded, they will still ignore Thinka's secure telegrams.
- Step 4 — Export the keyring
With the dummy selected, confirm in Properties that Secure Group Addresses is set to "Supported", then click Export Interface Information (highlighted below) to export the keyring.
- Step 5 — Protect the keyring with a password
When you export, ETS asks you to protect the keyring with a password — set one and remember it; you will need it in the next step.
- Step 6 — Upload the keyring to Thinka
In Thinka, open the KNX Data Secure section. It is reachable from two places — both write to the same setting, so use whichever fits your workflow:
- Settings → KNX → KNX Data Secure, or
- the ETS Import page.
Choose the exported .knxkeys file, enter the keyring password, and click Upload keyring.
KNX Secure is now active, and Thinka can read and write your secure group addresses.
