MA achieves compliance with the European standard ETSI EN 303 645 through its products for the generation, storage, and use of solar power in residential and commercial applications. This standard defines fundamental security requirements for connected devices in the Internet of Things (IoT) domain. Its goal is to strengthen system protection against cyberattacks and ensure user privacy.
By certifying its products according to ETSI EN 303 645, SMA is proactively exceeding legal requirements—enhancing data protection and cybersecurity for both homeowners and businesses. In addition to implementing the new requirements of the Radio Equipment Directive (EN 18031), which will take effect on August 1, 2025, SMA has also chosen to comprehensively integrate the extended security requirements into its product portfolio for home and business solutions.
"Anyone investing in a PV system wants to be well prepared for the long term—including in terms of IT security," said Marek Seeger, Information Security Manager at SMA. "It’s worth taking a closer look at the security features, as modern protection mechanisms offer both safety and peace of mind in everyday use. IT security and data protection are fundamental components of our system solutions. With the additional certification we are actively protecting our customers against cyberattacks and hacking—offering them genuine security and peace of mind when using connected energy systems in both residential and commercial applications."
Overview of ETSI EN 303 645 security requirements:
By certifying its products according to ETSI EN 303 645, SMA is proactively exceeding legal requirements—enhancing data protection and cybersecurity for both homeowners and businesses. In addition to implementing the new requirements of the Radio Equipment Directive (EN 18031), which will take effect on August 1, 2025, SMA has also chosen to comprehensively integrate the extended security requirements into its product portfolio for home and business solutions.
"Anyone investing in a PV system wants to be well prepared for the long term—including in terms of IT security," said Marek Seeger, Information Security Manager at SMA. "It’s worth taking a closer look at the security features, as modern protection mechanisms offer both safety and peace of mind in everyday use. IT security and data protection are fundamental components of our system solutions. With the additional certification we are actively protecting our customers against cyberattacks and hacking—offering them genuine security and peace of mind when using connected energy systems in both residential and commercial applications."
Overview of ETSI EN 303 645 security requirements:
- Security by default: Devices are securely preconfigured, requiring no additional setup.
- Secure authentication: Appropriate security mechanisms protect against unauthorized access.
- Update management: Regular, automated, and secure software updates address known vulnerabilities.
- Communication security: Encrypted data transmission prevents unauthorized external access.
- Data protection: Only essential data is securely collected and processed.
- Reduced attack surface: Potential attack vectors are minimized.
- Secure operation: Systems are designed to prevent insecure operating states.
