Skip to content

Discovered, explained

BSI TR-03109

Secure communication adapters in accordance with TR-03109-5 for smart meter gateways (SMGW)

The smart meter gateway (SMGW) is the functional centrepiece of every intelligent metering system (iMSys). CLS communication adapters are used to ensure a communicative connection of technical devices to the HAN interface of the SMGW. Manufacturers prove that these are really secure and fulfil the state of the art with a test in accordance with TR-03109-5.

Anzeige des Energieverbrauches eines Smart Homes

What is the BSI TR-03109-5?

The Technical Guideline TR-03109-5 is intended to ensure the secure communicative connection of technical equipment, e.g. remotely controllable consumption and generation equipment, to a Smart Meter Gateway (SMGW). To this end, it contains minimum functional requirements for the security of CLS communication adapters.

The aim of the guideline developed by the German Federal Office for Information Security (BSI) is to enable confidential and interoperable communication between the CLS communication adapter and the SMGW. TR-03109-5 thus represents an important step towards a secure digital energy transition.

BSI TR-03109: Benefits of testing and certification

Increased IT security

By complying with TR-03109-5, you improve the IT security of your CLS communication adapter.

Improved data protection

TR-03109-5 emphasises the security of data transmission in order to guarantee the confidentiality of data.

Reduced risk of attack

TR-03109-5 helps you to minimise the risk of possible attacks on the CLS component & sensitive data.

Strengthened trust

Testing in accordance with TR-03109-5 promotes social trust in the infrastructure surrounding the iMSys.

Compliant with the Metering Point Operat

With BSI TR-03109-5, you meet the legal requirements for the digitalisation of the energy transition.

Successful proof of conformity

With an independent test in accordance with TR-03109-5, you can prove that your CLS communication adapter fulfils the requirements of the TR.

Be a driver of the digital energy transi

By fulfilling the requirements of TR-03109-5, you are setting a good example and making a valuable contribution to a secure digital energy transition.

We will support you – no matter what

Get started at last!

We advise you

TÜV NORD IT Secure Communication I Berlin
To the consulting services Contact us
Goal achieved?

We check that

TÜV Informationstechnik I Essen
To the test offers Contact us

Our services for BSI TR-03109-5

  • Pre-tests in accordance with BSI TR-03109-5
    Before the actual test in accordance with BSI TR-03109-5, we offer you corresponding pre-tests that you can use to determine the current status quo of your CLS component.
  • Testing in accordance with BSI TR-03109-5
    As part of testing in accordance with BSI TR-03109-5, our experts assess whether your CLS component fulfils the functionality and interoperability requirements in accordance with the TR.
  • Testing of CLS components according to Accelerated Security Certification
    If your CLS component has local IT or remote access interfaces, our experts will test these as part of an Accelerated Security Certification (ASC) for the scope 'Components in the HAN of the SMGW'.

Common Criteria

Would you like to have your smart meter certified with CC? Then follow this link.

More about Common Criteria

Certification according to BSI TR-03109-5

BSI TR-03109-5 serves as the basis for the certification of a CLS communication adapter. It defines corresponding security objectives and minimum requirements that are placed on the security performance of a CLS component.

The entire physical CLS component that realises the CLS communication adapter is always the subject of testing and certification. Software-only testing is not possible.


Depending on the requirements, there are two certification options:

Frequently Asked Questions (FAQ)

What you need to know about BSI TR-03109 and smart meter gateways

The TR is aimed at manufacturers of CLS components, i.e. devices in the HAN (Home Area Network) of the SMGW that realise a CLS communication adapter.

A BSZ is necessary if the CLS component contains additional IT or remote access interfaces. The BSZ ensures that the component effectively protects itself and the HAN of the SMGW against attacks from the other networks.

A CLS communication adapter is a logical unit that is intended to use the TLS proxy function provided by the SMGW and that represents the TLS endpoint of this TLS proxy channel in the HAN of the SMGW.

The CLS communication adapter is part of a (physical) CLS component.

The requirements of TR-03109-5 came into force on 1 January 2024.

Proof of fulfilment of the requirements of BSI TR-03109-5 and compliance with the state of the art in accordance with Section 22 (2) MsbG:

  1. is generally provided by certification from the Federal Office for Information Security,
  2. can also be carried out for installation in the agile rollout in accordance with § 31 Paragraph 1 Number 2 MsbG from 1 January to 31 December 2024 by means of a manufacturer's self-declaration in accordance with the model,
  3. shall be deemed to have been provided for installations carried out before 1 January 2024 if the connection to the smart meter gateway complies with the requirements applicable up to that date, in particular the state of the art set out in [PP-0073] and [TR-03109-1].