Maximum safety for
system operators and installers

The security design of KOSTAL inverters is based on several layers of protection that are harmonised to ensure a high level of security. These layers include physical and digital measures that ensure that only authorised persons have access to the critical functions of the devices.

1. Individual service password and master key: Every interaction with a KOSTAL inverter requires the entry of an individual service password, which is only available to authorised installers. In addition, the installer requires a unique master key, which can only be found on the type plate of the respective device. This two-stage authentication procedure significantly minimises the risk of unauthorised access.
2. Encrypted connections: Communication between the inverters and external devices takes place exclusively via secure, encrypted connections. This prevents sensitive data from being intercepted or manipulated during transmission. Ports for secure HTTPS communication are open by default. Other communication ports remain closed to reduce potential points of attack.
3. Closed default configuration: All communication ports of the inverters are deactivated by default, with the exception of those that are absolutely necessary. Only when an authorised user requires certain functions can these be activated manually after appropriate authentication.
   

Security during parameterisation

One of the key functions of an inverter is the ability to customise parameters such as the device's response to grid events or integration into energy management systems. With KOSTAL, however, such changes can only be made by authorised installers.

The user interface of the inverters is designed so that only installers with the correct service password can access sensitive settings. End users, on the other hand, can only view basic information without being able to change safety-critical parameters. This concept effectively prevents tampering by unauthorised persons.

Protection against physical access

In addition to digital security, KOSTAL also offers protection against physical access. Access to the inverters is made more difficult by robust housings and clear labelling of the safety-relevant components. If the device is physically accessed, critical security features such as the master key remain protected.

Additional protective measures against cyber attacks

KOSTAL has integrated mechanisms that detect and respond to unusual behaviour or repeated unauthorised access attempts. For example, access is automatically blocked after a specified number of incorrect login attempts. This protects the devices against brute force attacks and ensures that only authorised persons are granted access.

In addition, all software updates are signed and encrypted to ensure that no unauthorised changes can be made to the device software. Critical updates are provided automatically and securely via the KOSTAL servers.

A harmonised security concept

KOSTAL's multi-layered security model is designed to protect both installers and end users from security risks. With a clear focus on authentication, encryption and access control, KOSTAL sets standards in inverter security.

"Our security measures ensure that our customers can fully rely on the efficiency and reliability of their energy systems," explains Andreas Schmalenberg, Product Manager at KOSTAL. "We combine innovative technology with robust protection to meet both current and future challenges."

KOSTAL ensures that system operators and installers alike can rely on a system that protects their data and infrastructure - for a secure and sustainable energy future.