Safekeeping Of Device Certificate - TAPKO MECip-Sec Product Description

1.7

Safekeeping of Device Certificate

The Device Certificate can be found on a label that is adhered on side of the housing. To
avoid unwanted access, the label consists of two parts. The upper part must remain on the
housing, for identifying the device. The lower one is the tear-off part. This part contains the
Device Certificate and should be removed from the device for keeping the information at a
safe place after commissioning.
After adding the Device Certificate to the Device Certificate list in ETS, the tear-off part of the
Device Certificate label can be archived at a safe place. The Device Certificate list only needs
to contain the certificates of the KNX Secure devices that are used within the ETS project. ETS
then automatically uses the correct certificates for programming the relevant devices.
For clear identification of the device after removing the tear-off part, the serial number is
printed on both label parts, on the one that was removed and on the fixed one that stays on
the housing.
When the tear-off part that contains the Device Certificate is lost, only the password-
protected ETS project contains the Device Certificate.
Be aware, when the Device Certificate is completely lost, meaning the tear-off part is
unavailable and the project password (that contained the certificate) is lost, too, a
Secure device cannot be set to active secure mode anymore! Consequently, Security
cannot be activated within a new ETS project. In this case, to reprogram a Secure device
with active secure mode, a Reset has to be carried out and the Secure device can only
be used unsecured, as "plain" device, from then.
Product Description
Figure 4: Device Certificate Label
MECip
SECURE
tear-off part
- 12 -