How to set up KNX Secure with Thinka

KNX

KNX Secure with Thinka — Setup Guide


This guide explains how to enable KNX Secure so that Thinka can read and write encrypted (secure) group addresses on your KNX installation.

  • Why this is needed

KNX Secure devices only accept telegrams from senders authorized in your ETS project. Adding a KNX Secure "dummy" device with Thinka's individual address authorizes Thinka, and the exported keyring provides the keys it needs.

  • Prerequisites

    > ETS (5 or 6) with your secure project open.
    > Thinka connected to the KNX bus.
    > You know Thinka's individual address (shown in Thinka under *Settings → KNX*).
Screenshot 2026-06-05 at 14.08.50.png 90.19 KB
  • Step 1 — Add a KNX Secure dummy device

In the ETS Catalog, search for dummy secure and add the Albrecht Jung "Dummy Secure" device.

Screenshot 2026-06-04 at 16.14.44.png 301.22 KB

  • Step 2 — Give the dummy Thinka's individual address

Add the dummy to your line, then in Properties set its Individual Address to the same value as Thinka (here `1.1.33`).
This is the key step: Thinka sends and receives its secure telegrams from this address, so the dummy must carry exactly the same one.

Screenshot 2026-06-04 at 16.16.33.png 276.22 KB

  • Step 3 — Associate your secure group addresses

Link the secure group addresses Thinka needs to control or read to the dummy device's group object(s) — everything Thinka should switch, dim, set, and read back (switching, dimming, value, status, etc.). Secure group addresses are marked with the shield icon.
Screenshot 2026-06-04 at 16.16.51.png 246.96 KB

> Important: After associating the addresses, download the affected receiver devices (e.g. the dimming actuator). The download is what writes Thinka's address into their authorized-sender tables. Until those devices are downloaded, they will still ignore Thinka's secure telegrams.

  • Step 4 — Export the keyring

With the dummy selected, confirm in Properties that Secure Group Addresses is set to "Supported", then click Export Interface Information (highlighted below) to export the keyring.
Screenshot 2026-06-04 at 16.17.04.png 101.54 KB


  • Step 5 — Protect the keyring with a password

When you export, ETS asks you to protect the keyring with a password — set one and remember it; you will need it in the next step.
Screenshot 2026-06-04 at 16.17.21.png 237.75 KB


  • Step 6 — Upload the keyring to Thinka

In Thinka, go to Settings → KNX → KNX Data Secure. Choose the exported `.knxkeys` file, enter the keyring password, and click Upload keyring.
Knx Secure is now active, and Thinka can read and write your secure group addresses.
Screenshot 2026-06-04 at 16.19.04.png 113.06 KB