The energy transition not only requires technological innovations, but also a high level of IT security. With the successful certification of two new digital control boxes in accordance with the BSI TR-03109-5 technical guideline, the development of a secure, interoperable smart grid in Germany continues to gather pace.
The manufacturers Theben Smart Energy GmbH and VIVAVIS AG have passed both the Accelerated Security Certification (BSZ) and the conformity test in accordance with TR-03109-5 at the Federal Office for Information Security (BSI) – both with positive results. This means that there are now eight certified control box solutions on the market that can be used in the digitalization of the energy sector.

Control boxes according to the latest FNN specifications
The new certified control boxes from Theben (SELEXA D) and VIVAVIS (STBF24C) are not just technical components – they are crucial interfaces in the smart grid of the future. As the first control boxes to comply with the latest FNN specifications, they combine a fully integrated EEBUS interface with a successfully passed safety certificate in accordance with TR-03109-5.
This means that they can receive and execute control commands from the operator’s backend system via the CLS proxy of the smart meter gateway. Heat pump, wallbox or photovoltaic system – the new control boxes make networked, flexible control via EEBUS practical.
This will enable secure, standardized communication between millions of producers and consumers – which is central to Section 9 EEG and Section 14a EnWG.

Technical depth that works in practice
The accelerated certification process (BSZ) in particular requires more than just good technology – it needs reliable processes, clarity in the procedure and a common understanding of the system landscape.
Our testers at SRC have exactly that: Experience in dealing with CLS components, in-depth knowledge of gateway architectures and a methodical approach to IT security. In close coordination with manufacturers and the BSI, we accompany the testing process from planning to the issuing of certificates – with the aim of making IT security plannable and comprehensible.
Foundation for a resilient energy infrastructure
The secure controllability of downstream components (consumers or generators) is an essential building block for grid integration. At the same time, it is a protective mechanism against cyber attacks – because attack surfaces arise wherever systems communicate digitally with each other.
SRC is pleased to have contributed to the successful certification of the “SELEXA D” and “STBF24C” control boxes as a reliable partner.









