A KNX system often runs for many years without problems. To keep changes and troubleshooting possible, it needs an up-to-date ETS project file, maintained software in IP interfaces, visualisation, and servers, and remote access that is not openly exposed to the internet. Work on the electrical installation belongs in the hands of a qualified electrician.
1. Back up the ETS project file
All settings of a KNX system are stored in the project file of ETS, the software for planning and commissioning. Without it, every change is laborious, because the project first has to be reconstructed from the system. Ask the installer to hand over the current file in .knxproj format together with the project password, and keep both separate from the system, for example encrypted in the cloud and also on a USB stick.
2. What regular maintenance includes
- 1Compare the project file with the actual state of the system and document every change.
- 2Update the devices’ application programs in ETS when the manufacturer fixes bugs or adds features.
- 3Check and update the firmware of the IP interface, IP router, visualisation, and logic server.
- 4Check bus traffic with the ETS group monitor for errors and an unusually high number of telegrams.
- 5Adjust timers, scenes, and logic to changed routines at home or in the office.
3. Plan updates, do not install them in passing
An update is not an end in itself. Read the manufacturer’s release notes first, back up the project file and server configuration, and choose a time when lights, blinds, or heating may briefly not respond. Afterwards, test the most important functions, including scenes, timers, and alarm notifications.
4. Use KNX Secure for extensions
Newer devices support KNX Secure. Telegrams on the bus and on the network are then encrypted and protected against tampering. For extensions and when replacing IP interfaces, it pays to choose Secure-capable devices. ETS manages the keys in the project. Without the project file and project password, Secure devices can no longer be changed easily.
5. Remote access only with encryption
Exposing an IP interface or visualisation directly to the internet through port forwarding is risky, because without KNX Secure the bus itself has no protection. A VPN, for example through the router, or an encrypted remote access service from the manufacturer with its own sign-in is safer. The guest Wi-Fi should have no access to the system, and in an office it belongs in its own network segment.
6. Other smart home systems
The same principles apply to other systems such as Loxone, Homematic IP, or Home Assistant: back up the configuration, plan updates and test afterwards, and allow remote access only with encryption. Here too, it matters that you yourself have access to the configuration and credentials, not just the installer.
7. What the electrician takes care of
New cables, installing or replacing actuators in the distribution board, and all work on the electrical installation belong in the hands of a qualified electrician. The software side with project file, updates, logic, visualisation, and network can be maintained separately, much of it remotely.