Energy harvesting · 868 MHz · EEP · Teach-in · AES-128 · 9 min read

EnOcean Energy Harvesting Sensors: Operating Principle, Range and Installation

EnOcean sensors require no batteries and no cable connection. Energy is harvested from the ambient environment — light, mechanical motion, or temperature differentials — and stored in a capacitor to power a single radio transmission. Understanding the harvesting mechanism for each sensor type determines correct placement, orientation, and expected transmission reliability over the installation lifetime.

Energy harvesting principle

Three harvesting mechanisms cover the full EnOcean sensor portfolio. Each mechanism determines when the sensor can transmit — photovoltaic sensors transmit only when sufficient light is available, piezoelectric sensors transmit only when mechanically actuated, and thermoelectric sensors transmit continuously as long as a temperature differential is maintained.

Photovoltaic

  • Indoor light: 200–1000 lux sufficient
  • Solar cell converts ambient light
  • Capacitor charged continuously
  • Periodic transmission (30s–10min interval)
  • Temperature, humidity, occupancy sensors

Piezoelectric

  • Button press deforms crystal
  • Mechanical energy → electrical charge
  • One press = one telegram (no standby power)
  • Works in total darkness
  • Rocker switches, push-buttons

Thermoelectric

  • Seebeck effect: heat → voltage
  • Minimum 2 K temperature differential
  • Radiator valve actuators typical use case
  • Continuous operation with sufficient ΔT
  • Power decreases as ΔT drops

Maintenance-free: correctly installed energy harvesting sensors have a rated operational lifetime exceeding 20 years with no battery replacement, no cable routing, and no preventive maintenance. The solar cell and piezo element are the only wear components — both are rated for the full product lifetime.

RF specification: 868 MHz sub-GHz band

EnOcean operates in the sub-GHz ISM band, which provides superior wall and floor penetration compared to 2.4 GHz protocols (Zigbee, Z-Wave, Wi-Fi). The lower frequency results in longer wavelengths that diffract around structural obstacles rather than being absorbed, giving reliable range through multiple reinforced concrete floors.

EnOcean RF specification

Frequency bands (regional):
  EU/EEA:     868.3 MHz (SRD band, 25mW ERP)
  North America: 902 MHz  (FCC Part 15.249)
  Japan:      928 MHz

Modulation:    GFSK (Gaussian Frequency Shift Keying)
Data rate:     100 kbit/s
Telegram length: 14 bytes (standard), up to 64 bytes (VLD)
Transmit power: ≤10 mW (10 dBm) typical

Range (line of sight):
  Indoor:     30 m (through 2–3 standard walls)
  Outdoor:    300 m (unobstructed)

Typical wall penetration:
  Plasterboard:   3–4 walls
  Brick (30cm):   1–2 walls
  Reinforced concrete: 1 floor (with repeater for 2+)

EnOcean uses a unidirectional telegram structure — sensors transmit only; receivers never acknowledge. Each telegram is sent 3 times with random delays (sub-ms jitter) to reduce collision probability in environments with many transmitters.

Key sensor types and EEP codes

Each EnOcean sensor transmits telegrams conforming to a specific Equipment Profile (EEP). The EEP code defines how to decode the telegram payload. Receivers and gateways must be configured with the correct EEP for each sensor sender ID.

EEP CodeSensor typeHarvestingTypical use
F6-02-012-rocker push-buttonPiezoelectricLight switching, blind control
D5-00-01Door/window contactReed switch + capacitorWindow open/closed status
A5-04-01Temperature + humidityPhotovoltaicRoom climate monitoring
A5-07-01Occupancy (PIR)PhotovoltaicPresence detection, HVAC
A5-06-01IlluminancePhotovoltaicDaylight control, blind automation
A5-02-05Temperature 0–40°CPhotovoltaicRoom temperature setpoint
A5-12-01Energy meter pulsePhotovoltaic or wiredPulse counter, kWh metering

Installation rules

EnOcean sensor placement follows straightforward rules, but deviations cause intermittent failures that are difficult to diagnose once the installation is complete. Verify placement before mounting.

Placement rules

Photovoltaic sensors:
  Orient solar cell toward window or primary light source
  Avoid north-facing walls in high-latitude installations
  Minimum 200 lux ambient to maintain transmission interval
  Do not mount in cupboards, behind furniture, or in ducts

Metal surfaces:
  Minimum 20 cm clearance from large metal surfaces
  Metal acts as RF reflector — causes multipath interference
  Electrical distribution panels: mount gateway outside steel enclosure
  Flush-mounted in metal back-box: use surface-mount version instead

868 MHz interference sources:
  Other SRD 868 MHz devices (alarms, DALI emergency systems)
  Density limit: EnOcean specifies max 10 transmitters per 10m²
  for reliable collision-free operation at 30s transmission interval
  Use EnOcean Repeater (e.g. Eltako FRP2) to extend range
  — do not cascade more than 2 repeaters (introduces latency)

Photovoltaic: orientation critical

Sensors installed with the solar cell facing away from the room's light source will have insufficient harvesting in winter months or during extended cloudy periods. The transmission interval increases as capacitor charge drops — a sensor that transmitted every 60s in summer may take 10 minutes between telegrams in December if poorly oriented.

Metal proximity: range reduction

Sensors mounted directly on steel DIN rails or within metal enclosures experience 70–90% range reduction. Use plastic back-boxes for flush mounting, or surface-mount versions where a metal enclosure is unavoidable. The EnOcean antenna is typically a PCB trace — coupling to a metal plane detunes it significantly.

Commissioning: teach-in procedure

EnOcean uses a teach-in procedure to register a sensor sender ID with the receiver or gateway. Until teach-in is complete, the receiver ignores all telegrams from that sensor. The procedure differs slightly between unidirectional (1-way) and bidirectional (2-way) devices.

Teach-in sequence (4BS sensors, e.g. A5-04-01)

1. Place receiver/gateway in learn mode
   (ETS6 parameter, or physical learn button on standalone receiver)
   Learn mode window: typically 60 seconds

2. On the sensor: activate teach-in telegram
   — Hold learn button until LED flashes (3–5 seconds typical)
   — Or press button 3× rapidly (model-dependent)
   — The teach-in telegram contains sender ID + EEP code

3. Gateway confirms receipt:
   — LED on receiver flashes green
   — ETS6 diagnostic: "New EnOcean device learned, ID: 0xABCD1234"

4. Assign EEP manually if not auto-detected:
   — Some gateways require manual EEP selection after learn
   — Weinzierl KNX ENO 634: EEP assigned per channel in ETS6

5. Verify with Fhem/openHAB or ETS6 group monitor:
   — Activate sensor (press button, cover PIR, change temperature)
   — Confirm telegram appears with correct decoded values

Rx sensitivity verification (optional):
   — Move sensor to intended installation position
   — Check signal strength in gateway diagnostics (RSSI in dBm)
   — Acceptable: better than -90 dBm for reliable operation
   — Below -95 dBm: consider repeater or reposition sensor

Battery vs energy harvesting hybrid

Not all EnOcean sensors are purely energy harvesting. Some applications require transmission in conditions where ambient energy is insufficient — outdoor temperature sensors in winter darkness, CO₂ sensors in plant rooms without windows, or emergency lighting status sensors that must operate during blackouts. These use hybrid designs with an optional backup battery or supercapacitor.

Common hybrid applications

  • Outdoor temperature sensors: photovoltaic primary, CR2032 battery backup for operation in darkness and winter months
  • CO₂ sensors: high power demand (NDIR measurement) requires battery or local 3V supply alongside harvesting
  • Flood detectors: always battery-backed — must transmit even during power outages when flooding is most likely
  • Radiator valve actuators: thermoelectric primary (2K ΔT minimum), supercapacitor buffer for setback periods when radiator is cold

Security: AES-128 rolling code

EnOcean 3.0 introduced Security Level 3, providing AES-128 encryption with a rolling code (sequence counter) and a Message Authentication Code (MAC). This prevents replay attacks — capturing a valid telegram and re-transmitting it — which are the primary attack vector against wireless sensor systems.

EnOcean security levels

Security Level 0: No security (legacy devices, unencrypted)
Security Level 1: Rolling code only (no encryption, replay protection)
Security Level 2: AES-128 encryption, no rolling code
Security Level 3: AES-128 encryption + rolling code + MAC
                  ↑ Required for critical applications (access, alarms)

Security teach-in (Level 3):
  Uses Security Teach-In Telegram (SETT) containing:
    - 128-bit AES encryption key
    - Initial rolling code value
    - Private key (optional, for bi-directional auth)

  SETT must be transmitted in a secure environment
  (on-site during installation, not in the field)

  Once taught in, the receiver validates:
    - AES-128 decryption succeeds
    - Rolling code is strictly incrementing (no replay)
    - MAC matches payload

Security Level 3 compatibility: not all EnOcean gateways support Security Level 3 decryption. Verify gateway firmware and feature list before specifying secured sensors for access control or alarm applications. The Weinzierl KNX ENO 634 and MDT SCN-ENC02 both support AES-128 Security Level 3 with firmware updates available from the manufacturer.

Need EnOcean wireless sensors specified and commissioned?

We specify the correct EnOcean sensor types for each application, manage teach-in commissioning on site, and integrate wireless inputs into KNX panels — delivered with full EEP documentation and RSSI verification records.

Request a quote →
Loading...
Back to top