newsonline24

By certifying its products according to ETSI EN 303 645, SMA is proactively exceeding legal requirements—enhancing data protection and cybersecurity for both homeowners and businesses. In addition to implementing the new requirements of the Radio Equipment Directive (EN 18031), which will take effect on August 1, 2025, SMA has also chosen to comprehensively integrate the extended security requirements into its product portfolio for home and business solutions.

"Anyone investing in a PV system wants to be well prepared for the long term—including in terms of IT security," said Marek Seeger, Information Security Manager at SMA. "It’s worth taking a closer look at the security features, as modern protection mechanisms offer both safety and peace of mind in everyday use. IT security and data protection are fundamental components of our system solutions. With the additional certification we are actively protecting our customers against cyberattacks and hacking—offering them genuine security and peace of mind when using connected energy systems in both residential and commercial applications."

Overview of ETSI EN 303 645 security requirements:

• Security by default: Devices are securely preconfigured, requiring no additional setup.
• Secure authentication: Appropriate security mechanisms protect against unauthorized access.
• Update management: Regular, automated, and secure software updates address known vulnerabilities.
• Communication security: Encrypted data transmission prevents unauthorized external access.
• Data protection: Only essential data is securely collected and processed.
• Reduced attack surface: Potential attack vectors are minimized.
• Secure operation: Systems are designed to prevent insecure operating states.

Security at SMA not only goes beyond individual devices but it also includes seamless integration into the SMA Cloud, which is comprehensively protected through ISO/IEC 27001 certification for information security management systems.