Go To Content Go To Menu
Close Menu
Search
Menu
Search

Smart Metering

All cryptographic components for Smart Meter PKI communication

MTG provides all cryptographic components for communication in accordance with BSI TR-03109 and the Smart Metering PKI Certificate Policy. As a Sub-CA, MTG Metering CA issues all required certificate types in compliance with regulations. The cryptographic components of the MTG CryptoController product family provide the underlying security infrastructure, independent of any specific manufacturer. This enables any application to communicate securely between smart metering systems (SMGW) and the relevant market participants, as well as with the AS4-based MAKO and via the BDEW Web API.

We are happy to assist you by phone:

+49 6151 8000-0
Call us now Call us now
Book Consultation Book Consultation

Get your free consultation with one of our experts!

Request Appointment
Request Info Request Info

Get in touch and receive more information personalized to your
own solution!

Contact us now

Our offering for PKI-based smart meter communication in accordance with BSI TR-03109

Overview of MTG IT Security components for communication with SMGWs and market participants (© MTG AG)

Overview of MTG IT Security components for communication with SMGWs and market participants (© MTG AG)

Smart Meter PKI (SM-PKI)

MTG Metering CA

The MTG Metering CA forms the technological basis for most of the SM-PKI’s sub-CAs. Together with DARZ.CA, it is operated as a managed service through DARZ GmbH or directly on-premises at energy utilities. The system provides a comprehensive range of all certificate types defined in the SM-PKI for all market roles.

GWH Security

MTG CryptoController (MCC GWH)

The MTG CryptoController GWH (MCC GWH) enables SMGW manufacturers to equip their smart meter gateways directly during production with the legally required quality seal certificates (SMGW-G certificates) from the official SM-PKI. The MCC GWH provides support for the XML cryptography used in B2B ordering and delivery processes via the VDE-FNN electronic delivery note (eLS) and order form (eBS).

GWA Security

MTG CryptoController (MCC GWA)

As high-performance middleware for GWA applications, the MTG CryptoController GWA (MCC GWA) serves as a central cryptography component. It secures encrypted communication and all management via the admin/service channel to the SMGW. MCC also supports the GWA in applying the SMGW-W certificates from the SM-PKI.

In MCC, the GWA can manage and monitor the EMT and SubCA certificates used in the SMGW profiles accordingly.

MCC GWA supports XML cryptography for the “GWA-IKD” as part of the B2B ordering and delivery processes in accordance with VDE-FNN for the electronic delivery note (eLS) and the electronic order form (eBS).

pEMT Security

MTG CryptoController (MCC pEMT)

The MTG CryptoController GWA (MCC pEMT) is the middleware for BSI TR-03109-compliant meter data reception from the SMGW. Systems for MSBs (MDM), utility operators (network-service-oriented), as well as suppliers and direct marketers use it to securely receive and process data via the respective TAF.

aEMT Security

MTG CryptoController (aEMT)

The MTG CryptoController aEMT (MCC aEMT) is the specialized middleware for BSI TR-03109-compliant switching via the Smart Meter Gateway (SMGW). It enables the simple, fast, and compliant integration of existing switching applications from metering point operators (MSB). Control commands are then transmitted securely and in compliance with standards via the CLS/HAN interface.

EMT MAKO AS4 Security

MTG CryptoController (MCC MAKO AS4)

The MTG CryptoController (MCC MAKO AS4) acts as middleware to secure AS4-based market communication (MAKO). It ensures smooth and encrypted data exchange using the required “EMT.MAK” certificates from the SM-PKI.

BDEW-API Security

MTG CryptoController (MCC BDEW-API)

The MTG CryptoController BDEW-API (MCC BDEW-API) acts as middleware to manage SM-PKI-based communication among market participants. It seamlessly integrates the official BDEW Web API services for LFW24/MaLo-ID queries (API ID 0003) and switching (API IDs 0001, 0002), as well as the required directory service, and ensures smooth, encrypted data exchange using the mandated “.EMT.API” certificates from the SM-PKI.

MTG CLS Stack

The MTG CLS Stack enables BSI TR-03109-compliant connection of CLS devices to the Smart Meter Gateway (SMGW). If the MTG Mehrwert-Konnektor is used in CLS management, the multiplexing feature can be deployed, making all TCP/IP-capable devices connectable. Otherwise, the CLS Stack is used by default to establish the HAN-CLS connection to the SMGW.

HSM Integration

MTG integrates HSMs approved for the creation and use of SM-PKI certificates – regardless of manufacturer – to comply with legal requirements. This ensures that your IT infrastructure meets the requirements of BSI TR-03109. For maximum scalability and reliability, the approved Utimaco HSMs can also be equipped with our HSM-HA layer. Wherever legally permitted, we can implement a non-physical cryptographic module compliant with Security Level 1 upon request, which can result in significant cost savings.

Downloads & Links

BDEW Web-API-Services: MaLo-ID & Directory Service Query as well as rule-compliant transmission of Switching Commands

Easy Integration into ERP Systems & Network Control Centers. Secure Connectivity in the DARZ Data Center. Flexible & Workflow-Optimized!

German Article in energie.blog: A leap in efficiency for gateway administrators (de)

AVSystem and MTG AG announce a technical partnership

What can we do for you?

For further information feel free to contact us!

contact@mtg.de+49 6151 8000-0