Sicherheit für Ihre Lüftungsanlage: ISYteq 4.0 erfüllt die Anforderungen der EN 18031

With the increasing connectivity of modern building, even something as “ordinary” as a ventilation unit can become a potential target for cyberattacks. And this is exactly why Europe is now strengthening legislation and standards to protect digital assets.

One of these standards, EN 18031, applies to all air handling unit manufacturers in the EU who offer internet-connected control systems including radio equipment. At FläktGroup, we have proactively updated our ISYteq 4.0 control system to meet these requirements while making sure customers can still benefit from our digital services such as CAREconnect and Cloud for ISYteq.

Below we explain what this change means, why it matters, and how it protects you. 

Why this matters: The growing cyber risk in building systems 

Before looking at standards, compliance, or updated control systems, it’s important to understand why ventilation equipment is now a legitimate cybersecurity concern. Modern buildings have evolved into complex digital ecosystems, where even a single weak point can be exploited: 

• Interconnect building technologies – HVAC, lighting, access control, security systems and energy management all share network infrastructure 
• Growing online connectivity – Remote access, cloud platforms and web-based HMIs create new digital entry points 
• Automated cyberattacks – These attackers use scanning tools to identify unsecured devices, regardless of industry or size 

This shift into a digital age means even the humble air handling, who was once considered purely mechanical, can now become a cyber target. That’s why standards like EN 18031 are emerging and why updates such as FläktGroup’s improvements to ISYteq 4.0 are essential.  

What Is EN 18031?

EN 18031 is a relatively new European cybersecurity standard that applies to air handling units and their control systems. It defines how systems must handle:

• User authentication 
• Network communication 
• Stored passwords 
• Remote connectivity 
• Configuration and commissioning 

All manufacturers must follow these rules. The goal is to ensure that ventilation equipment across Europe cannot be used by criminals as weak links in a building’s digital environment.

At FläktGroup, we support this direction. Better protection benefits everyone - installers, service teams, building owners, and the occupants inside.

How FläktGroup Ensures Both Security and Convenience

When EN 18031 came into effect, our first priority was to remain compliant. This initially meant temporarily blocking the built-in 4G modem in ISYteq 4.0.

However, we knew our customers would benefit from our wireless digital services such as:

• CAREconnect - Designed to harness real-time data, predictive insights and intelligent resource optimisation, CAREconnect delivers a smarter, more efficient, proactive approach to servicing.
• Cloud connectivity - Cloud for ISYteq provides users with a quick and easy overview of all their connected air handling units. Alarm notifications enable users to respond quickly and efficiently in the event of a failure. They also have full access to the HMI display from any web browser with an internet connection.

So we set out to redesign the firmware and application software so the modem could be safely activated again - while fully meeting the requirements of EN 18031.

The result is a new ISYteq 4.0 software release that enhances security, protects customer data, and restores the full functionality of our digital services. 
 
Key Improvements in the New ISYteq 4.0 Release

Here are the most important changes introduced to meet EN 18031.

Secure web communication (HTTPS): We have upgraded the internal web server from HTTP to HTTPS, ensuring encrypted communication between the user and the control system.

Removal of unsecure communication channels: To eliminate risk, we removed: 

• Email alarm notifications
• SMS alarm notifications
• WiFi functionality in the HMI

Since these features relied on technologies that cannot meet EN 18031 security requirements.

Completely redesigned login and password handling

This is the biggest visible change for users. When a new system is powered up, you will now:

1. Log in as SystemAdmin 
2. Be forced to set a new secure password 
3. Create normal user accounts 
4. Optionally require users to change their password at first login 

Only after this setup can commissioning begin. 

Strong password rules

Passwords must include:

• Minimum 8 characters
• At least 1 uppercase letter
• At least 1 lowercase letter
• At least 1 special character

Protection against brute force attacks

If the wrong password is entered multiple times, the system imposes increasing delays between attempts. This prevents attackers from “guessing” their way in.

Encrypted password storage 

Passwords stored in ISYteq 4.0 are irreversibly encrypted. 

If a password is lost, it cannot be retrieved, only reset. 

FläktGroup Service can restore the system to factory settings if needed (additional service cost may apply).

What This Means for You

• Greater protection for your building - Your digital assets are better protected from unauthorized access, manipulation, and cyber threats.
• Compliance with EU standards - Your installation is aligned with current European security requirements.
• Secure access without complexity - You still get the convenience of remote access, cloud services, and support—now with significantly enhanced security.
• Futureproof investment - As regulations continue to evolve, FläktGroup is committed to keeping your systems compliant and protected. 

FläktGroup’s Commitment to HVAC System Security

At FläktGroup, we care about protecting our customers’ systems, both mechanically and digitally. Our goal is to make advanced functionality available without exposing users to unnecessary risk.

The enhanced ISYteq 4.0 software release is just the beginning. As European legislation continues to evolve, we will stay ahead to ensure your ventilation systems remain safe, compliant, and easy to use.