All cryptographic components for
Smart Meter PKI communication

The MTG Metering CA forms the technological basis for most of the SM-PKI’s sub-CAs. Together with DARZ.CA, it is operated as a managed service through DARZ GmbH or directly on-premises at energy utilities. The system provides a comprehensive range of all certificate types defined in the SM-PKI for all market roles.

The MTG CryptoController GWH (MCC GWH) enables SMGW manufacturers to equip their smart meter gateways directly during production with the legally required quality seal certificates (SMGW-G certificates) from the official SM-PKI. The MCC GWH provides support for the XML cryptography used in B2B ordering and delivery processes via the VDE-FNN electronic delivery note (eLS) and order form (eBS).

As high-performance middleware for GWA applications, the MTG CryptoController GWA (MCC GWA) serves as a central cryptography component. It secures encrypted communication and all management via the admin/service channel to the SMGW. MCC also supports the GWA in applying the SMGW-W certificates from the SM-PKI.

In MCC, the GWA can manage and monitor the EMT and SubCA certificates used in the SMGW profiles accordingly.

MCC GWA supports XML cryptography for the “GWA-IKD” as part of the B2B ordering and delivery processes in accordance with VDE-FNN for the electronic delivery note (eLS) and the electronic order form (eBS).

The MTG CryptoController GWA (MCC pEMT) is the middleware for BSI TR-03109-compliant meter data reception from the SMGW. Systems for MSBs (MDM), utility operators (network-service-oriented), as well as suppliers and direct marketers use it to securely receive and process data via the respective TAF.

The MTG CryptoController aEMT (MCC aEMT) is the specialized middleware for BSI TR-03109-compliant switching via the Smart Meter Gateway (SMGW). It enables the simple, fast, and compliant integration of existing switching applications from metering point operators (MSB). Control commands are then transmitted securely and in compliance with standards via the CLS/HAN interface.

The MTG CryptoController (MCC MAKO AS4) acts as middleware to secure AS4-based market communication (MAKO). It ensures smooth and encrypted data exchange using the required “EMT.MAK” certificates from the SM-PKI.

The MTG CryptoController BDEW-API (MCC BDEW-API) acts as middleware to manage SM-PKI-based communication among market participants. It seamlessly integrates the official BDEW Web API services for LFW24/MaLo-ID queries (API ID 0003) and switching (API IDs 0001, 0002), as well as the required directory service, and ensures smooth, encrypted data exchange using the mandated “.EMT.API” certificates from the SM-PKI.

The MTG CLS Stack enables BSI TR-03109-compliant connection of CLS devices to the Smart Meter Gateway (SMGW). If the MTG Mehrwert-Konnektor is used in CLS management, the multiplexing feature can be deployed, making all TCP/IP-capable devices connectable. Otherwise, the CLS Stack is used by default to establish the HAN-CLS connection to the SMGW.

MTG integrates HSMs approved for the creation and use of SM-PKI certificates – regardless of manufacturer – to comply with legal requirements. This ensures that your IT infrastructure meets the requirements of BSI TR-03109. For maximum scalability and reliability, the approved Utimaco HSMs can also be equipped with our HSM-HA layer. Wherever legally permitted, we can implement a non-physical cryptographic module compliant with Security Level 1 upon request, which can result in significant cost savings.