Smart home gateway / hub

Central hub connecting smart home devices, running firmware and relaying control commands.

A smart home gateway aggregates a local network of connected devices, runs the firmware that brokers control commands, and often exposes a remote access surface. Because it sits between the local network and the internet, its security posture directly affects every device behind it. CRA documentation for a gateway therefore starts from the gateway's own components and update mechanism, and covers the remote-access surface explicitly.

Where this device type sits in the Regulation

In the Regulation's own structure, 'smart home products with security functionalities, including smart home gateways, smart home hubs and smart home central points of control' are named in Annex III Class I (Regulation (EU) 2024/2847, Art. 32(2)). Whether THIS specific gateway has such security functionalities and therefore falls in that named category is the manufacturer's guided questionnaire answer, never an assumption of this site.

CRA importance classes for this product type

All other products (default class) Important class I (Annex III) Important class II (Annex III) Critical class (Annex IV)

Typical components

• Zigbee / Matter stack
• MQTT broker
• Linux kernel / RTOS
• Web/control API
• TLS library

Most relevant Annex I requirements

• I.2(d) — protect the remote access surface and the local devices behind it
• I.2(c) — automated, user-notified security updates for the gateway firmware
• I.2(e) — encrypt control traffic and stored configuration
• II.7 — secure distribution of updates to the gateway fleet

Examples

• Matter / Zigbee hub
• Home automation controller
• Smart building gateway