EnoDisc® 2
The EnoDisc 2 securely connects battery-free EnOcean wireless sensors to your network. Every telegram is sent encrypted via ESP3 to the VL-700 BASE 2 or via MQTT to your control system – over Ethernet or Wi-Fi, powered via PoE.
Encrypted by default
HTTPS, MQTT over TLS and ESP3 over TLS 1.3. There are no unencrypted services.
Ethernet + Wi-Fi
Both work in parallel. If the cable fails, Wi-Fi takes over automatically.
Trusted by the VL-700 BASE 2 out of the box
Both devices carry certificates from the DEUTA manufacturer PKI and recognize each other without any setup.
How It Works
The EnoDisc 2 is the EnOcean gateway for buildings where security is non-negotiable. It receives and transmits EnOcean radio signals at 868 MHz and immediately forwards every telegram: as an encrypted ESP3 data stream to the VL-700 BASE 2 or as an MQTT message to your broker. Additional radio frequencies are in the works, as with the EnoDisc for all country variants: EnOcean at 902 MHz (U.S., Colombia), 921 MHz (Taiwan, Korea), and 928 MHz (Japan), plus 2.4 GHz in addition to EnOcean.
Every connection is encrypted. The VL-700 BASE 2 and the EnoDisc 2 verify each other using certificates—only a device with a valid certificate can receive data. Every EnoDisc 2 comes from the factory with its own certificate and password. The firmware will only start if it is signed by DEUTA.
Ethernet and Wi-Fi operate in parallel. During brief network outages, the EnoDisc 2 buffers the telegrams and delivers them later. You install updates via the web interface; if an update fails, the device automatically reverts to the previous version.
Mixed operation supported
In the VL-700 BASE 2, you select the connection for each disc: TCP for 1st-generation EnoDiscs, TLS for EnoDisc 2—optionally with name verification, which binds the channel to exactly one disc. This allows you to convert a system disc by disc without having to rebuild it.
Prerequisite
VL-700 BASE 2 with the latest EnOcean service.
Trust Through Certificates
The EnoDisc 2 exchanges data only with counterparties that present a valid certificate—either with the DEUTA manufacturer PKI as standard or with your own PKI.
Views and Assembly
All images are renderings. Product photos will follow.
Features
- Encrypted by default: HTTPS, MQTT over TLS, and ESP3 over TLS 1.3
- Mutual certificate verification, optionally available only for specific device names
- Pre-configured with the VL-700 BASE 2 via the DEUTA manufacturer PKI
- Custom PKI supported: 4 identities, 10 trust slots, assignment per service, block list
- Ethernet and Wi-Fi simultaneously, automatic failover in case of cable failure
- PoE or 24 V DC
- Up to two ESP3 clients simultaneously or one MQTT broker
- Designed for approximately 100 EnOcean sensors per device
- 30-second telegram buffer in case of connection loss
- Compatible with EnOcean USB300 applications (ESP3) and standard MQTT 3.1.1
- Individually tested: Each device is tested and logged before shipment—button, frequency alignment, noise level, radio range, Ethernet, Wi-Fi, and power supply
- Securely configured: Secure Boot, encrypted storage, no default password
- Security updates for at least 5 years
- 8 status LEDs and a live view of all telegrams in the browser
- Designed to meet the requirements of the Cyber Resilience Act
Benefits for You
Technical data
General
| Product | EnoDisc 2 (AL-515-00-868), EnOcean-to-IP Gateway |
| Order Number | 12984 (868 MHz, Europe) |
| Wireless | EnOcean ERP1, 868.3 MHz, reception and transmission |
| Additional radio frequencies | In the works: EnOcean 902 MHz (U.S., Colombia), 921 MHz (Taiwan, Korea), and 928 MHz (Japan), plus 2.4 GHz |
| Telegram Types | All ERP1 telegrams (including RPS, 1BS, 4BS, VLD, etc.) |
| Antenna | internal or external, switchable via web interface |
| Capacity | Designed for approximately 100 sensors |
| Certifications | CE and FCC certifications pending |
| Accessories | External 868 MHz whip antenna, white, with SMA connector |
| Production Inspection | Each device is tested individually and the results are recorded |
Network
| Ethernet | 10/100 Mbit/s, RJ45 |
| Wi-Fi | 2.4 GHz, simultaneously with Ethernet |
| IP / Names | IPv4, DHCP, mDNS |
| Time | NTP, can be set manually |
| Setup | Your own Wi-Fi access point; login credentials for each device are printed on the label |
Power Supply and Display
| Power Supply | PoE or 24 V DC |
| Display | 8 status LEDs, adjustable brightness |
| Operation | 1 button; web interface via HTTPS, in English |
Housing
| Dimensions | 86 x 86 x 25.5 mm |
| Material | ABS, flame-retardant per UL94-V0, recyclable |
| Color | white, RAL 9003 |
| Design | ventilated, IP20 protection rating |
| Installation | Wall or ceiling, including suspended grid ceilings (using cavity anchors or a wooden backing behind the panel); clip-on housing without screws; cable entry from the rear |
Forwarding (optional)
| ESP3 Server | MQTT client | |
|---|---|---|
| Transport | TLS 1.2 / 1.3, Port 8424 | MQTT 3.1.1 over TLS |
| Login | Client certificate, optional naming conventions | Username/password and/or certificate |
| Terminals | up to 2 | 1 broker |
| Data Format | ESP3, such as USB300 | JSON per telegram |
| Buffer | 30 s | 30 s |
Security
| Firmware | Signed only (Secure Boot), automatic fallback, downgrade disabled |
| Storage | encrypted |
| Logins | No default password; account locked after failed login attempts |
| Users | up to 8; View / Setup / Administrator |
| Certificates | Factory certificate per device; proprietary PKI; 30-day expiration warning |
| Security Updates | at least 5 years |
Subject to technical changes and errors. Images are for illustrative purposes only.
Dimensions
Compact clip-on housing, 86 x 86 x 25.5 mm. The recessed front panel accommodates a foil label. The SMA connector for an external antenna is located at the top right and protrudes 5.4 mm.
Dimensions in mm
Status at a Glance: 8 Status LEDs
Eight LEDs indicate the status of the EnoDisc 2 without software. The colors always have the same meaning; you can adjust the brightness (4 levels) and mode (normal, warnings only, off) in the web interface. Use “Identify” to visually locate a device for 60 seconds.
| LED | Function | Green | Yellow | Red / Blue |
|---|---|---|---|---|
| 1 | Reserve | Reserved for future features | ||
| 2 | System | is | Startup, self-test after update, memory warning | Startup error, watchdog restart |
| 3 | Security | off = everything is fine | Invalid time, certificate is about to expire | Certificate has expired |
| 4 | Radio | Ready to receive; flashes with each telegram (white when transmitting) | – | Radio module not responding |
| 5 | Forwarding | MQTT connected or ESP3 remote station connected | No connection, waiting for time | TLS, certificate, or authentication error |
| 6 | Access | – | Initial Setup: Open | Wi-Fi access point active |
| 7 | Wi-Fi | Connected | Connecting | Login rejected |
| 8 | Ethernet | Connection with an IP address | Connection without an IP address | No connection |
Web Interface and Roles
Setup is done in the browser—using only HTTPS, without plugins or external content. Up to eight users are each assigned one of three roles.
EnoDisc and EnoDisc 2
| EnoDisc (1st Generation) | EnoDisc 2 | |
|---|---|---|
| Connection to the VL-700 | ESP3 via TCP | ESP3 over TLS 1.3, mutual certificate verification |
| Web Interface | HTTP | HTTPS |
| Network | Ethernet, PoE | Ethernet + Wi-Fi, PoE, or 24 V |
| Forwarding | ESP3 to 1 remote station | ESP3 to 2 client devices or MQTT |
| Proprietary PKI | – | Yes |
| Updates | – | signed, with automatic fallback |
Downloads
- PDFEnoDisc 2 Data Sheet (AL-515-00-868), preliminaryAs of November 1, 2026 · 273 KB
- PDFQuick Guide to Installation and Commissioning, PreliminaryAs of November 1, 2026 · 500 KB
- PDFEU Declaration of Conformity (CE)In preparation
Frequently Asked Questions
Can I use EnoDisc and EnoDisc 2 together?
Yes. In the VL-700 BASE 2, you configure the connection for each Disc—TCP for the EnoDisc, TLS for the EnoDisc 2. This allows you to convert a system one Disc at a time.
What do I need to set up for the encrypted connection?
With the VL-700 BASE 2, nothing special is required: Both devices come pre-installed with certificates from the DEUTA manufacturer PKI and trust each other by default. If you use your own PKI, you’ll need to install your certificates on both devices.
Does the EnoDisc 2 work without the VL-700?
Yes—as an MQTT gateway for your own broker or as an ESP3 gateway for software that works with an EnOcean USB300 and supports TLS with a client certificate.
How many sensors can an EnoDisc 2 handle?
It is designed to handle approximately 100 EnOcean sensors. In practice, it’s usually the wireless range that limits the number, not the capacity.
What happens during a network outage?
The EnoDisc 2 buffers the telegrams for 30 seconds and delivers them later. If the cable fails, Wi-Fi takes over.
How long will security updates be available?
At least five years.
Interested in the EnoDisc 2?
We’ll let you know as soon as the EnoDisc 2 is available.