node-red-contrib-knx-ultimate 4.0.4 → 4.0.6

package/CHANGELOG.md

@@ -6,6 +6,12 @@
 
 # CHANGELOG
 
+**Version 4.0.6** - September 2025<br/>
+- Fixed regression in automatic datapoint selection, based on group address DPT.<br/>
+
+**Version 4.0.5** - September 2025<br/>
+- NEW: You have now the choide to select multiple modes to authenticate to a KNX Gateway.<br/>
+
 **Version 4.0.4** - September 2025<br/>
 - NEW: you can now login to your secure gateway using only tunnel and password, without the keyring file.<br/>
 

package/nodes/knxUltimate-config.html

@@ -25,11 +25,12 @@
             tunnelIASelection: { value: "Auto" },
             tunnelIA: { value: "" },
             tunnelInterfaceIndividualAddress: { value: "" },
+            tunnelUserPassword: { value: "" },
+            tunnelUserId: { value: "" },
             autoReconnect: { value: "yes" }
         },
         credentials: {
-            keyringFilePassword: { type: "password" },
-            tunnelUserPassword: { type: "password" }
+            keyringFilePassword: { type: "password" }
         },
         oneditprepare: function () {
             // Go to the help panel
@@ -71,13 +72,13 @@
                 active: (node.knxSecureSelected === true || node.knxSecureSelected === 'true') ? 1 : 0,
                 activate: function (event, ui) {
                     node.knxSecureSelected = $(ui.newTab).index() === 1;
-                    try { updateTunnelIAVisibility(); updatePhysAddrVisibility(); updateSecureMulticastHint(); } catch (e) { }
+                    try { updateTunnelIAVisibility(); updatePhysAddrVisibility(); updateSecureMulticastHint(); enforceProtocolFromIP(); } catch (e) { }
                 }
             });
             // Ensure the correct tab is enforced after all UI init
             try {
                 const initialActive = (node.knxSecureSelected === true || node.knxSecureSelected === 'true') ? 1 : 0;
-                setTimeout(() => { $("#tabsMain").tabs("option", "active", initialActive); updateTunnelIAVisibility(); updatePhysAddrVisibility(); updateSecureMulticastHint(); }, 0);
+                setTimeout(() => { $("#tabsMain").tabs("option", "active", initialActive); updateTunnelIAVisibility(); updatePhysAddrVisibility(); updateSecureMulticastHint(); enforceProtocolFromIP(); }, 0);
             } catch (e) { }
 
             // Keyring ACE editor setup
@@ -110,17 +111,85 @@
                 }
             }
 
+            function isSecureTabActive() {
+                try {
+                    return $("#tabsMain").tabs("option", "active") === 1;
+                } catch (e) {
+                    return !!(typeof node.knxSecureSelected !== 'undefined' ? node.knxSecureSelected : false);
+                }
+            }
+
+            function parseIPv4Address(str) {
+                if (typeof str !== 'string') return null;
+                const parts = str.trim().split('.');
+                if (parts.length !== 4) return null;
+                const octets = [];
+                for (let i = 0; i < parts.length; i++) {
+                    const part = parts[i];
+                    if (!/^\d+$/.test(part)) return null;
+                    const value = Number(part);
+                    if (value < 0 || value > 255) return null;
+                    octets.push(value);
+                }
+                return octets;
+            }
+
+            function isMulticastIPv4(octets) {
+                if (!Array.isArray(octets) || octets.length !== 4) return false;
+                const first = octets[0];
+                return first >= 224 && first <= 239;
+            }
+
+            function normalizeTunnelIAValue(value) {
+                if (typeof value !== 'string') return '';
+                const trimmed = value.trim();
+                return (trimmed && trimmed !== 'undefined') ? trimmed : '';
+            }
+
+            function setTunnelIAValue(value) {
+                const normalized = normalizeTunnelIAValue(value || '');
+                try { $("#node-config-input-tunnelIA").val(normalized); } catch (e) { }
+                try { $("#node-config-input-tunnelInterfaceIndividualAddress").val(normalized); } catch (e) { }
+            }
+
+            function syncTunnelIAFromManual() {
+                try { setTunnelIAValue($("#node-config-input-tunnelInterfaceIndividualAddress").val()); } catch (e) { }
+            }
+
+            function syncTunnelIAFromKeyring() {
+                try { setTunnelIAValue($("#node-config-input-tunnelIA").val()); } catch (e) { }
+            }
+
+            function enforceProtocolFromIP() {
+                try {
+                    const ipTyped = String($("#node-config-input-host").val() || '').trim();
+                    if (!ipTyped) return;
+                    const octets = parseIPv4Address(ipTyped);
+                    if (!octets || isMulticastIPv4(octets)) return;
+                    const autoProto = isSecureTabActive() ? 'TunnelTCP' : 'TunnelUDP';
+                    const $sel = $("#node-config-input-hostProtocol");
+                    if ($sel.val() !== autoProto) {
+                        $sel.val(autoProto);
+                        updateTunnelIAVisibility();
+                        updateSecureMulticastHint();
+                        updatePhysAddrVisibility();
+                    }
+                } catch (e) { }
+            }
+
             function updateSecureCredentialMode() {
                 try {
                     const mode = getSecureCredentialsMode();
-                    const isKeyring = (mode === 'keyring');
-                    $("#secureKeyringFields").toggle(isKeyring);
-                    if (!isKeyring) {
+                    const showKeyringFields = (mode === 'keyring' || mode === 'combined');
+                    const showKeyringIAControls = (mode === 'keyring');
+                    $("#secureKeyringFields").toggle(showKeyringFields);
+                    if (!showKeyringIAControls) {
                         $("#rowTunnelIASelection").hide();
                         $("#divTunnelIA").hide();
                     }
                 } catch (e) { }
                 updateTunnelIAVisibility();
+                enforceProtocolFromIP();
             }
 
             // Helper: show/hide Tunnel IA controls depending on mode
@@ -131,7 +200,9 @@
                     const ip = $("#node-config-input-host").val();
                     const isMulticast = (hostProtocol === 'Multicast') || (ip === '224.0.23.12');
                     const mode = getSecureCredentialsMode();
-                    const showTunnelIA = isSecure && !isMulticast && mode === 'keyring';
+                    const keyringMode = (mode === 'keyring');
+                    const manualMode = (mode === 'manual' || mode === 'combined');
+                    const showTunnelIA = isSecure && !isMulticast && keyringMode;
                     if (showTunnelIA) {
                         $("#rowTunnelIASelection").show();
                         if ($("#node-config-input-tunnelIASelection").val() === 'Manual') {
@@ -143,9 +214,10 @@
                         $("#rowTunnelIASelection").hide();
                         $("#divTunnelIA").hide();
                     }
-                    const showManualTunnelFields = isSecure && !isMulticast && mode === 'manual';
+                    const showManualTunnelFields = isSecure && !isMulticast && manualMode;
                     $("#rowTunnelInterfaceIndividualAddress").toggle(showManualTunnelFields);
                     $("#rowTunnelUserPassword").toggle(showManualTunnelFields);
+                    $("#rowTunnelUserId").toggle(showManualTunnelFields);
                     if (!showManualTunnelFields) {
                         try {
                             $("#node-config-input-tunnelInterfaceIndividualAddress").removeClass('input-error');
@@ -237,7 +309,9 @@
             let aTunnelIAs = [];
             function populateTunnelIAList() {
                 try {
-                    if (getSecureCredentialsMode() !== 'keyring') {
+                    const mode = getSecureCredentialsMode();
+                    const keyringMode = (mode === 'keyring');
+                    if (!keyringMode) {
                         aTunnelIAs = [];
                         try {
                             const $ia = $("#node-config-input-tunnelIA");
@@ -275,8 +349,14 @@
 
             // Secure: Tunnel IA selection
             try {
+                const storedTunnelIA = (() => {
+                    const manualStored = normalizeTunnelIAValue(node.tunnelInterfaceIndividualAddress);
+                    const keyringStored = normalizeTunnelIAValue(node.tunnelIA);
+                    return manualStored || keyringStored;
+                })();
+                setTunnelIAValue(storedTunnelIA);
                 $("#node-config-input-tunnelIASelection").val(typeof node.tunnelIASelection === 'undefined' ? 'Auto' : node.tunnelIASelection);
-                $("#node-config-input-tunnelIA").val(typeof node.tunnelIA === 'undefined' ? '' : node.tunnelIA);
+                $("#node-config-input-tunnelIA").on('change input', syncTunnelIAFromKeyring);
                 const toggleTunnelIA = () => {
                     if ($("#node-config-input-tunnelIASelection").val() === 'Manual') {
                         $("#divTunnelIA").show();
@@ -299,8 +379,8 @@
                     $("#node-config-input-tunnelIA").autocomplete({
                         minLength: 0,
                         source: function (request, response) { response(aTunnelIAs); },
-                        focus: function (event, ui) { $(this).val(ui.item.value); return false; },
-                        select: function (event, ui) { $(this).val(ui.item.value); return false; }
+                        focus: function (event, ui) { setTunnelIAValue(ui.item.value); return false; },
+                        select: function (event, ui) { setTunnelIAValue(ui.item.value); return false; }
                     }).on('focus click', function () {
                         // Show dropdown on focus/click
                         $(this).autocomplete('search', '');
@@ -310,7 +390,9 @@
 
             try {
                 $("#node-config-input-secureCredentialsMode").val(typeof node.secureCredentialsMode === 'undefined' ? 'keyring' : node.secureCredentialsMode);
-                $("#node-config-input-tunnelInterfaceIndividualAddress").val(typeof node.tunnelInterfaceIndividualAddress === 'undefined' ? '' : node.tunnelInterfaceIndividualAddress);
+                $("#node-config-input-tunnelInterfaceIndividualAddress").on('change input', syncTunnelIAFromManual);
+                $("#node-config-input-tunnelUserPassword").val(typeof node.tunnelUserPassword === 'undefined' ? '' : node.tunnelUserPassword);
+                $("#node-config-input-tunnelUserId").val(typeof node.tunnelUserId === 'undefined' ? '' : node.tunnelUserId);
                 $("#node-config-input-secureCredentialsMode").on('change', function () {
                     updateSecureCredentialMode();
                     updateSecureMulticastHint();
@@ -508,9 +590,7 @@
             // Abilita manualmente la lista dei protocolli quando l'utente modifica l'IP a mano
             try {
                 $("#node-config-input-host").on('input', function () {
-                    const isSecure = (function () {
-                        try { return $("#tabsMain").tabs("option", "active") === 1; } catch (e) { return !!node.knxSecureSelected; }
-                    })();
+                    const isSecure = isSecureTabActive();
                     const $sel = $("#node-config-input-hostProtocol");
                     // Abilita select
                     $sel.prop('disabled', false);
@@ -548,6 +628,8 @@
                             }
                             // If discovery knows protocol, preselect it (keep select enabled for manual override)
                             if (proto) { $("#node-config-input-hostProtocol").val(proto); }
+                            const octets = parseIPv4Address(ipTyped);
+                            if (octets && !isMulticastIPv4(octets)) enforceProtocolFromIP();
                         }
                     } catch (e) { }
                 });
@@ -614,6 +696,9 @@
                     node._csvEditor.destroy();
                     node._csvEditor = null;
                 }
+                try {
+                    $("#node-config-input-tunnelIA").val($("#node-config-input-tunnelInterfaceIndividualAddress").val());
+                } catch (e) { }
             } catch (e) { }
             // Check if the csv file contains errors
             if (($("#node-config-input-csv").val() != 'undefined' && $("#node-config-input-csv").val() != "") || ($("#node-config-input-keyring").val() != 'undefined' && $("#node-config-input-keyring").val() != "")) {
@@ -734,6 +819,7 @@
                     <select id="node-config-input-secureCredentialsMode" style="width:200px;">
                         <option value="keyring" data-i18n="knxUltimate-config.ets.secure_credentials_mode_keyring"></option>
                         <option value="manual" data-i18n="knxUltimate-config.ets.secure_credentials_mode_manual"></option>
+                        <option value="combined" data-i18n="knxUltimate-config.ets.secure_credentials_mode_combined"></option>
                     </select>
                 </div>
                 <div id="secureKeyringFields">
@@ -762,9 +848,13 @@
                     <label for="node-config-input-tunnelInterfaceIndividualAddress"><i class="fa fa-map-marker"></i> <span data-i18n="knxUltimate-config.ets.tunnel_interface_individual_address"></span></label>
                     <input type="text" id="node-config-input-tunnelInterfaceIndividualAddress" style="width:150px;" data-i18n="[placeholder]knxUltimate-config.ets.tunnel_interface_individual_address_placeholder"/>
                 </div>
+                <div class="form-row" id="rowTunnelUserId" style="display:none;">
+                    <label for="node-config-input-tunnelUserId"><i class="fa fa-id-badge"></i> <span data-i18n="knxUltimate-config.ets.tunnel_user_id"></span></label>
+                    <input type="text" id="node-config-input-tunnelUserId" style="width:150px;" />
+                </div>
                 <div class="form-row" id="rowTunnelUserPassword" style="display:none;">
                     <label for="node-config-input-tunnelUserPassword"><i class="fa fa-lock"></i> <span data-i18n="knxUltimate-config.ets.tunnel_user_password"></span></label>
-                    <input type="password" id="node-config-input-tunnelUserPassword" style="width:200px;" />
+                    <input type="text" id="node-config-input-tunnelUserPassword" style="width:200px;" />
                 </div>
             </p>   
         </div>

package/nodes/knxUltimate-config.js

@@ -101,8 +101,24 @@ module.exports = (RED) => {
     node.secureCredentialsMode = typeof config.secureCredentialsMode === "undefined" ? "keyring" : config.secureCredentialsMode;
     // 2025-09 Secure Tunnel Interface IA selection (Auto/Manual)
     node.tunnelIASelection = typeof config.tunnelIASelection === "undefined" ? "Auto" : config.tunnelIASelection;
-    node.tunnelIA = typeof config.tunnelIA === "undefined" ? "" : config.tunnelIA;
-    node.tunnelInterfaceIndividualAddress = typeof config.tunnelInterfaceIndividualAddress === "undefined" ? "" : config.tunnelInterfaceIndividualAddress;
+    node.tunnelIA = typeof config.tunnelIA === "undefined" || config.tunnelIA === null ? "" : String(config.tunnelIA);
+    node.tunnelInterfaceIndividualAddress = typeof config.tunnelInterfaceIndividualAddress === "undefined" || config.tunnelInterfaceIndividualAddress === null
+      ? ""
+      : String(config.tunnelInterfaceIndividualAddress);
+    const normalizedTunnelIA = (value) => {
+      if (typeof value !== "string") return "";
+      const trimmed = value.trim();
+      return trimmed === "undefined" ? "" : trimmed;
+    };
+    node.tunnelIA = normalizedTunnelIA(node.tunnelIA);
+    node.tunnelInterfaceIndividualAddress = normalizedTunnelIA(node.tunnelInterfaceIndividualAddress);
+    if (!node.tunnelInterfaceIndividualAddress && node.tunnelIA) {
+      node.tunnelInterfaceIndividualAddress = node.tunnelIA;
+    } else if (!node.tunnelIA && node.tunnelInterfaceIndividualAddress) {
+      node.tunnelIA = node.tunnelInterfaceIndividualAddress;
+    }
+    node.tunnelUserPassword = typeof config.tunnelUserPassword === "undefined" ? "" : config.tunnelUserPassword;
+    node.tunnelUserId = typeof config.tunnelUserId === "undefined" ? "" : config.tunnelUserId;
     node.name = config.name === undefined || config.name === "" ? node.host : config.name; // 12/08/2021
     node.timerKNXUltimateCheckState = null; // 08/10/2021 Check the state. If not connected and autoreconnect is true, retrig the connetion attempt.
     node.knxConnectionProperties = null; // Retains the connection properties
@@ -128,7 +144,8 @@ module.exports = (RED) => {
       ) {
         node.hostProtocol = "Multicast";
       } else {
-        node.hostProtocol = "TunnelUDP";
+        const isSecure = node.knxSecureSelected === true || node.knxSecureSelected === "true";
+        node.hostProtocol = isSecure ? "TunnelTCP" : "TunnelUDP";
       }
       node.sysLogger?.info("IP Protocol AUTO SET to " + node.hostProtocol + ", based on IP " + node.host);
     }
@@ -161,29 +178,40 @@ module.exports = (RED) => {
       try {
         if (node.knxSecureSelected) {
           const secureMode = typeof node.secureCredentialsMode === "string" ? node.secureCredentialsMode : "keyring";
-          if (secureMode === "manual") {
-            // Manual credentials: no keyring, only IA + password
-            node.secureTunnelConfig = {
-              tunnelInterfaceIndividualAddress: (node.tunnelInterfaceIndividualAddress || "").trim(),
-              tunnelUserPassword: node.credentials?.tunnelUserPassword || "",
-            };
-            if (!node.secureTunnelConfig.tunnelInterfaceIndividualAddress) {
-              delete node.secureTunnelConfig.tunnelInterfaceIndividualAddress;
+          const useManual = secureMode === "manual" || secureMode === "combined";
+          const useKeyring = secureMode === "keyring" || secureMode === "combined";
+
+          const secureConfig = {};
+          const modeParts = [];
+
+          if (useManual) {
+            const manualIA = (node.tunnelInterfaceIndividualAddress || "").trim();
+            const manualUserId = (node.tunnelUserId || "").trim();
+            const manualPwd = node.tunnelUserPassword || "";
+
+            if (manualIA) {
+              secureConfig.tunnelInterfaceIndividualAddress = manualIA;
             }
-            RED.log.info("KNX-Secure: secure mode selected. Using manual tunnel credentials.");
-          } else {
-            // Prepare secure config for KNXClient. The loader accepts either a
-            // filesystem path to .knxkeys or the raw XML/base64 content.
-            node.secureTunnelConfig = {
-              knxkeys_file_path: node.keyringFileXML || "",
-              knxkeys_password: node.credentials?.keyringFilePassword || "",
-            };
-            // Manual IA selection based on keyring content
+            if (manualUserId) {
+              secureConfig.tunnelUserId = manualUserId;
+            }
+            // Always include password property so KNX library receives the intended value (even if empty)
+            secureConfig.tunnelUserPassword = manualPwd;
+            modeParts.push("manual tunnel credentials");
+          }
+
+          if (useKeyring) {
+            secureConfig.knxkeys_file_path = node.keyringFileXML || "";
+            secureConfig.knxkeys_password = node.credentials?.keyringFilePassword || "";
+
             try {
-              if (node.tunnelIASelection === "Manual" && typeof node.tunnelIA === "string" && node.tunnelIA.trim() !== "") {
-                node.secureTunnelConfig.tunnelInterfaceIndividualAddress = node.tunnelIA.trim();
-              } else {
-                node.secureTunnelConfig.tunnelInterfaceIndividualAddress = ""; // Auto
+              const manualSelectionIA = normalizedTunnelIA(node.tunnelIA);
+              if (node.tunnelIASelection === "Manual" && manualSelectionIA) {
+                if (!secureConfig.tunnelInterfaceIndividualAddress) {
+                  secureConfig.tunnelInterfaceIndividualAddress = manualSelectionIA;
+                }
+              } else if (!secureConfig.tunnelInterfaceIndividualAddress) {
+                secureConfig.tunnelInterfaceIndividualAddress = ""; // Auto (let KNX stack select)
               }
             } catch (e) { /* empty */ }
 
@@ -199,9 +227,18 @@ module.exports = (RED) => {
                 node.sysLogger?.error("KNX Secure: keyring validation failed: " + err.message);
                 // Keep secure enabled: KNXClient will emit detailed errors on connect
               }
-            } else {
-              RED.log.info("KNX-Secure: secure mode selected. Using provided keyring and password.");
             }
+            modeParts.push("keyring file/password");
+          }
+
+          if (Object.keys(secureConfig).length > 0) {
+            node.secureTunnelConfig = secureConfig;
+          } else {
+            node.secureTunnelConfig = undefined;
+          }
+
+          if (modeParts.length > 0) {
+            RED.log.info(`KNX-Secure: secure mode selected (${modeParts.join(" + ")}). Node ${node.name || node.id}`);
           }
         } else {
           RED.log.info("KNX-Unsecure: connection to insecure interface/router using node " + (node.name || node.id));
@@ -765,7 +802,8 @@ module.exports = (RED) => {
       _dest = _datagram.cEMIMessage.dstAddress.toString();
 
       if (_evt === null || _src === null || _dest === null) {
-        node.sysLogger?.error("HandleBusEvent: unable to parse telegram, ignored"); return
+        node.sysLogger?.warn(`HandleBusEvent: unable to parse telegram, ignored (evt=${_evt || 'n/a'} src=${_src || 'n/a'} dest=${_dest || 'n/a'})`);
+        return;
       };
 
       _echoed = _echoed || false;
@@ -1494,7 +1532,7 @@ module.exports = (RED) => {
           try {
             jsValue = dptlib.fromBuffer(_Rawvalue, dpt);
             if (jsValue === null) {
-              node.sysLogger?.error(
+              node.sysLogger?.warn(
                 "buildInputMessage: received a wrong datagram form KNX BUS, from device " +
                 _srcGA +
                 " Destination " +

package/nodes/knxUltimate.html

@@ -417,9 +417,12 @@
                                     try { sDevName = sDevName.substr(sDevName.indexOf(")") + 1).trim(); } catch (error) { }
                                     $('#node-input-name').val(sDevName);
                                     var optVal = $("#node-input-dpt option:contains('" + (ui.item.dpt || '').trim() + "')").attr('value');
-                                    // Select the option value 
-                                    $("#node-input-dpt").val(optVal);
-                                    $("#node-input-dpt").trigger("change");
+                                    var $dptSelect = $("#node-input-dpt");
+                                    if (optVal !== undefined && optVal !== null) {
+                                        $dptSelect.val(optVal).trigger('change');
+                                    } else {
+                                        $dptSelect.trigger('change');
+                                    }
                                     // Persist secure flag for dynamic icon
                                     try {
                                         $("#node-input-gaSecure").val(ui.item.isSecure ? 'true' : 'false');
@@ -946,4 +949,4 @@
     </div>
 </div>
 <br /><br />
-</script>
+</script>

package/nodes/knxUltimateHueBattery.html

@@ -106,8 +106,12 @@
                     }
                     $('#node-input-namebatterysensor').val(sDevName);
                     var optVal = $("#node-input-dptbatterysensor option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptbatterysensor").val(optVal);
+                    var $dptSelect = $("#node-input-dptbatterysensor");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -243,4 +247,3 @@
 
 </script>
 
-

package/nodes/knxUltimateHueButton.html

@@ -144,8 +144,12 @@
                     }
                     $('#node-input-nameDim').val(sDevName);
                     var optVal = $("#node-input-dptrepeat option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptrepeat").val(optVal);
+                    var $dptSelect = $("#node-input-dptrepeat");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -194,8 +198,12 @@
                     }
                     $('#node-input-nameshort_release').val(sDevName);
                     var optVal = $("#node-input-dptshort_release option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptshort_release").val(optVal);
+                    var $dptSelect = $("#node-input-dptshort_release");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -227,8 +235,12 @@
                     }
                     $('#node-input-nameshort_releaseStatus').val(sDevName);
                     var optVal = $("#node-input-dptshort_releaseStatus option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptshort_releaseStatus").val(optVal);
+                    var $dptSelect = $("#node-input-dptshort_releaseStatus");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -261,8 +273,12 @@
                     }
                     $('#node-input-namedouble_short_release').val(sDevName);
                     var optVal = $("#node-input-dptdouble_short_release option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptdouble_short_release").val(optVal);
+                    var $dptSelect = $("#node-input-dptdouble_short_release");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -294,8 +310,12 @@
                     }
                     $('#node-input-namedouble_short_releaseStatus').val(sDevName);
                     var optVal = $("#node-input-dptdouble_short_releaseStatus option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptdouble_short_releaseStatus").val(optVal);
+                    var $dptSelect = $("#node-input-dptdouble_short_releaseStatus");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -460,5 +480,3 @@
 
 
 </script>
-
-

package/nodes/knxUltimateHueContactSensor.html

@@ -115,8 +115,12 @@
                     }
                     $('#node-input-namecontact').val(sDevName)
                     var optVal = $('#node-input-dptcontact option:contains(\'' + ui.item.label.split('#')[2].trim() + '\')').attr('value')
-                    // Select the option value
-                    $('#node-input-dptcontact').val(optVal)
+                    var $dptSelect = $('#node-input-dptcontact')
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change')
+                    } else {
+                        $dptSelect.trigger('change')
+                    }
                 },
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -241,4 +245,3 @@
   <br />
 </script>
 
-

package/nodes/knxUltimateHueLight.html

@@ -233,8 +233,13 @@
                 } catch (error) { }
                 $(_destinationWidgetName).val(sDevName);
                 var optVal = $(_destinationWidgetDPT + " option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr("value");
-                // Select the option value
-                $(_destinationWidgetDPT).val(optVal);
+                const $dptSelect = $(_destinationWidgetDPT);
+                if (optVal !== undefined && optVal !== null) {
+                  $dptSelect.val(optVal).trigger('change');
+                } else {
+                  // Ensure downstream widgets refresh even when the DPT is missing
+                  $dptSelect.trigger('change');
+                }
               },
             }).focus(function () {
               $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -1485,4 +1490,3 @@
 </script>
 
 
-

package/nodes/knxUltimateHueLightSensor.html

@@ -105,8 +105,12 @@
                     }
                     $('#node-input-namelightsensor').val(sDevName);
                     var optVal = $("#node-input-dptlightsensor option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptlightsensor").val(optVal);
+                    var $dptSelect = $("#node-input-dptlightsensor");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -245,4 +249,3 @@
 </script>
 
 
-

package/nodes/knxUltimateHueMotion.html

@@ -104,8 +104,12 @@
                     }
                     $('#node-input-namemotion').val(sDevName);
                     var optVal = $("#node-input-dptmotion option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptmotion").val(optVal);
+                    var $dptSelect = $("#node-input-dptmotion");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -233,4 +237,3 @@
 
 </script>
 
-

package/nodes/knxUltimateHueScene.html

@@ -147,8 +147,12 @@
                     }
                     $('#node-input-namescene').val(sDevName);
                     var optVal = $("#node-input-dptscene option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptscene").val(optVal);
+                    var $dptSelect = $("#node-input-dptscene");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                     ShowHideValScene();
                 }
             }).focus(function () {
@@ -184,8 +188,12 @@
                     }
                     $('#node-input-namesceneStatus').val(sDevName);
                     var optVal = $("#node-input-dptsceneStatus option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptsceneStatus").val(optVal);
+                    var $dptSelect = $("#node-input-dptsceneStatus");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                     ShowHideValScene();
                 }
             }).focus(function () {
@@ -221,8 +229,12 @@
                     }
                     $('#node-input-namesceneMulti').val(sDevName);
                     var optVal = $("#node-input-dptsceneMulti option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptsceneMulti").val(optVal);
+                    var $dptSelect = $("#node-input-dptsceneMulti");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                     ShowHideValScene();
                 }
             }).focus(function () {
@@ -589,5 +601,3 @@
 </div> <!-- // End TABS -->
 
 </script>
-
-

package/nodes/knxUltimateHueTapDial.html

@@ -107,8 +107,12 @@
                     }
                     $('#node-input-namerepeat').val(sDevName);
                     var optVal = $("#node-input-dptrepeat option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptrepeat").val(optVal);
+                    var $dptSelect = $("#node-input-dptrepeat");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -235,4 +239,3 @@
 
 </script>
 
-

package/nodes/knxUltimateHueTemperatureSensor.html

@@ -105,8 +105,12 @@
                     }
                     $('#node-input-nametemperaturesensor').val(sDevName);
                     var optVal = $("#node-input-dpttemperaturesensor option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dpttemperaturesensor").val(optVal);
+                    var $dptSelect = $("#node-input-dpttemperaturesensor");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -243,4 +247,3 @@
 
 </script>
 
-

package/nodes/knxUltimateHueZigbeeConnectivity.html

@@ -106,8 +106,12 @@
                     }
                     $('#node-input-namezigbeeconnectivity').val(sDevName);
                     var optVal = $("#node-input-dptzigbeeconnectivity option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptzigbeeconnectivity").val(optVal);
+                    var $dptSelect = $("#node-input-dptzigbeeconnectivity");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -243,4 +247,3 @@
 
 </script>
 
-

package/nodes/knxUltimateHuedevice_software_update.html

@@ -106,8 +106,12 @@
                     }
                     $('#node-input-namedevice_software_update').val(sDevName);
                     var optVal = $("#node-input-dptdevice_software_update option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptdevice_software_update").val(optVal);
+                    var $dptSelect = $("#node-input-dptdevice_software_update");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -243,4 +247,3 @@
 
 </script>
 
-

package/nodes/knxUltimateLoadControl.html

@@ -141,9 +141,12 @@
                         }
 
                         var optVal = $("#node-input-dpt option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                        // Select the option value 
-                        $("#node-input-" + _DPT).val(optVal);
-                        $("#node-input-" + _DPT).trigger("change");
+                        var $dptSelect = $("#node-input-" + _DPT);
+                        if (optVal !== undefined && optVal !== null) {
+                            $dptSelect.val(optVal).trigger('change');
+                        } else {
+                            $dptSelect.trigger('change');
+                        }
                     }
                 };
                 return paramAutoComplete;
@@ -358,4 +361,3 @@
 </br>
 </script>
 
-

package/nodes/knxUltimateSceneController.html

@@ -97,9 +97,12 @@
                     }
                     $('#node-input-name').val("Recall: " + sDevName + "/" + $('#node-input-name').val().split("/")[1]);
                     var optVal = $("#node-input-dpt option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dpt").val(optVal);
-                    $("#node-input-dpt").trigger("change");
+                    var $dptSelect = $("#node-input-dpt");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -222,9 +225,12 @@
                     }
                     $('#node-input-name').val($('#node-input-name').val().split("/")[0] + "/Save: " + sDevName);
                     var optVal = $("#node-input-dptSave option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                    // Select the option value 
-                    $("#node-input-dptSave").val(optVal);
-                    $("#node-input-dptSave").trigger("change");
+                    var $dptSelect = $("#node-input-dptSave");
+                    if (optVal !== undefined && optVal !== null) {
+                        $dptSelect.val(optVal).trigger('change');
+                    } else {
+                        $dptSelect.trigger('change');
+                    }
                 }
             }).focus(function () {
                 $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -363,7 +369,12 @@
                             } catch (error) {
                             }
                             var optVal = $(".rowRuleDPT option:contains('" + ui.item.label.split("#")[2].trim() + "')").attr('value');
-                            oDPTField.val(optVal);
+                            var $dptSelect = oDPTField;
+                            if (optVal !== undefined && optVal !== null) {
+                                $dptSelect.val(optVal).trigger('change');
+                            } else {
+                                $dptSelect.trigger('change');
+                            }
                         }
                     }).focus(function () {
                         $(this).autocomplete('search', $(this).val() + 'exactmatch');
@@ -493,5 +504,3 @@
 </div>
 
 </script>
-
-

package/nodes/locales/de/knxUltimate-config.json

@@ -88,8 +88,10 @@
             "secure_credentials_mode": "Quelle für Secure-Zugangsdaten",
             "secure_credentials_mode_keyring": "ETS-Keyring-Datei",
             "secure_credentials_mode_manual": "Manuelle Zugangsdaten",
+            "secure_credentials_mode_combined": "Keyring + manuelles Tunnel-Passwort",
             "tunnel_interface_individual_address": "Individuelle Adresse der Tunnel-Schnittstelle",
             "tunnel_interface_individual_address_placeholder": "1.1.1",
+            "tunnel_user_id": "Tunnel-Benutzer-ID",
             "tunnel_user_password": "Tunnel-Benutzerpasswort",
             "ga_list_label": "ETS-Gruppenadressliste"
         },

package/nodes/locales/de-DE/knxUltimate-config.html

@@ -19,9 +19,14 @@ Dieser Node stellt die Verbindung zu deinem KNX/IP‑Gateway her.
 | KNX Physical Address | Physikalische KNX‑Adresse, z. B. `1.1.200`. Standard: `15.15.22`. |
 | Bind to local interface | Lokales Netzwerk‑Interface für die Kommunikation. "Auto" wählt automatisch. Bei mehreren Interfaces (Ethernet/WLAN) ist eine manuelle Auswahl empfehlenswert, damit keine UDP‑Telegramme verloren gehen. |
 | Automatically connect to KNX BUS at start | Automatisch beim Start verbinden. Standard: "Yes". |
-| Secure credentials source | Wähle **ETS-Keyring-Datei** (Standard), um den Inhalt der `.knxkeys`-Datei samt Passwort bereitzustellen, oder **Manuelle Zugangsdaten**, um Tunnel-IA und Passwort ohne Keyring zu hinterlegen. Je nach Auswahl werden nur die passenden Eingabefelder angezeigt. |
-| Tunnel interface individual address | Sichtbar bei **Manuelle Zugangsdaten**. Optionale KNX-Individualadresse der sicheren Tunnel-Schnittstelle (z. B. `1.1.1`). Leer lassen, damit KNX Ultimate sie automatisch aushandelt. |
-| Tunnel user password | Sichtbar bei **Manuelle Zugangsdaten**. Passwort des sicheren Tunnel-Benutzers aus ETS. |
+| Secure credentials source | Leg fest, wie KNX Secure Daten bereitgestellt werden: **ETS-Keyring-Datei** (Data-Secure-Schlüssel und ggf. Tunnel-Zugang aus dem Keyring), **Manuelle Zugangsdaten** (nur KNX IP Tunnelling Secure mit manuell eingetragenem Benutzer) oder **Keyring + manuelles Tunnel-Passwort** (Data-Secure-Schlüssel aus dem Keyring, Tunnel-Benutzer/-Passwort manuell). Achtung: KNX Data Secure Telegramme benötigen immer einen Keyring. |
+| Tunnel interface individual address | Sichtbar, sobald die gewählte Option manuelle Zugangsdaten enthält (Manuelle Zugangsdaten oder Keyring + manuelles Tunnel-Passwort). Optionale KNX-Individualadresse der Tunnel-Schnittstelle (z. B. `1.1.1`); leer lassen, damit KNX Ultimate automatisch verhandelt. |
+| Tunnel user ID | Sichtbar bei manuellen Zugangsdaten. Optionale Kennung des KNX Secure Tunnel-Benutzers aus ETS. |
+| Tunnel user password | Sichtbar bei manuellen Zugangsdaten. Passwort des KNX Secure Tunnel-Benutzers aus ETS. |
+
+> **KNX Secure im Überblick**  
+> • *KNX Data Secure* schützt Gruppenadress-Telegramme und benötigt stets eine Keyring-Datei mit den Gruppenschlüsseln.  
+> • *KNX IP Tunnelling Secure* schützt den Verbindungsaufbau mithilfe eines Commissioning-Passworts. Dieses kann – je nach Modus – aus dem Keyring kommen oder manuell eingetragen werden.
 
 <br/>
 

package/nodes/locales/en-US/knxUltimate-config.html

@@ -19,9 +19,14 @@
 | KNX Physical Address | The physical KNX address, example 1.1.200. Default is "15.15.22".|
 | Bind to local interface | The Node will use this local interface for communications. Leave "Auto" for automatic selection. If you have more than one lan connection, for example Ethernet and Wifi, it's strongly recommended to manually select the interface, otherwise not all UDP telegram will reach your computer, thus the Node may not work as expected. Default is "Auto". |
 | Automatically connect to KNX BUS at start | Auto connect to the bus at start. Default is "Yes". |
-| Secure credentials source | Select **ETS keyring file** (default) to provide the `.knxkeys` content and password, or **Manual credentials** to enter the tunnel interface IA and password without a keyring. Switching mode shows only the relevant fields. |
-| Tunnel interface individual address | Visible when **Manual credentials** is selected. Optional KNX individual address of the secure tunnel interface (for example `1.1.1`). Leave empty to let KNX Ultimate negotiate it. |
-| Tunnel user password | Visible when **Manual credentials** is selected. Password of the secure tunnelling user configured in ETS. |
+| Secure credentials source | Choose how KNX Secure data is provided: **ETS keyring file** (Data Secure keys and, if available, tunnelling credentials come from the keyring), **Manual credentials** (only KNX IP Tunnelling Secure with a manually entered user) or **Keyring + manual tunnel password** (Data Secure keys from the keyring while the secure tunnel uses the manual user/password). Remember: KNX Data Secure telegrams always require a keyring. |
+| Tunnel interface individual address | Visible whenever the selected mode includes manual credentials (Manual or Keyring + manual tunnel password). Optional KNX individual address for the secure tunnel interface (for example `1.1.1`); leave empty to let KNX Ultimate negotiate it automatically. |
+| Tunnel user ID | Visible when manual credentials are used. Optional KNX Secure tunnel user identifier defined in ETS. |
+| Tunnel user password | Visible when manual credentials are used. Password of the secure tunnelling user configured in ETS. |
+
+> **KNX Secure at a glance**  
+> • *KNX Data Secure* protects group-address telegrams and **always** requires a keyring file containing the group keys.  
+> • *KNX IP Tunnelling Secure* protects the connection handshake using a commissioning password. The password can come from the keyring or be entered manually depending on the selected mode.
 
 <br/>
 

package/nodes/locales/en-US/knxUltimate-config.json

@@ -85,8 +85,10 @@
             "secure_credentials_mode": "Secure credentials source",
             "secure_credentials_mode_keyring": "ETS keyring file",
             "secure_credentials_mode_manual": "Manual credentials",
+            "secure_credentials_mode_combined": "Keyring + manual tunnel password",
             "tunnel_interface_individual_address": "Tunnel interface individual address",
             "tunnel_interface_individual_address_placeholder": "1.1.1",
+            "tunnel_user_id": "Tunnel user ID",
             "tunnel_user_password": "Tunnel user password",
             "ga_list_label": "ETS group address list"
         },

package/nodes/locales/it/knxUltimate-config.json

@@ -89,8 +89,10 @@
             "secure_credentials_mode": "Origine credenziali KNX Secure",
             "secure_credentials_mode_keyring": "File keyring ETS",
             "secure_credentials_mode_manual": "Credenziali manuali",
+            "secure_credentials_mode_combined": "File keyring + password tunnel manuale",
             "tunnel_interface_individual_address": "Indirizzo individuale interfaccia tunnel",
             "tunnel_interface_individual_address_placeholder": "1.1.1",
+            "tunnel_user_id": "ID utente tunnel",
             "tunnel_user_password": "Password utente tunnel",
             "ga_list_label": "Lista indirizzi di gruppo ETS"
         },

package/nodes/locales/it-IT/knxUltimate-config.html

@@ -19,9 +19,14 @@ Questo nodo si connette al tuo KNX/IP Gateway.
 | KNX Physical Address | Indirizzo fisico KNX, es. `1.1.200`. Default: `15.15.22`. |
 | Bind to local interface | Interfaccia di rete locale usata dal nodo. Lascia "Auto" per selezione automatica. Se hai più interfacce (Ethernet/Wi‑Fi), è consigliato impostarla manualmente per evitare perdita di telegrammi UDP. Default: "Auto". |
 | Automatically connect to KNX BUS at start | Connessione automatica al BUS all’avvio. Default: "Yes". |
-| Secure credentials source | Scegli **File keyring ETS** (default) per fornire il contenuto `.knxkeys` e la password, oppure **Credenziali manuali** per usare indirizzo individuale e password del tunnel senza keyring. Il cambio modalità mostra solo i campi pertinenti. |
-| Tunnel interface individual address | Visibile solo con **Credenziali manuali**. Indirizzo individuale dell’interfaccia tunnel sicura (es. `1.1.1`). Lascia vuoto per negoziazione automatica da parte di KNX Ultimate. |
-| Tunnel user password | Visibile solo con **Credenziali manuali**. Password dell’utente di tunnelling sicuro configurato in ETS. |
+| Secure credentials source | Scegli come fornire i dati KNX Secure: **File keyring ETS** (le chiavi Data Secure e, se presenti, le credenziali di tunnelling arrivano dal keyring), **Credenziali manuali** (solo KNX IP Tunnelling Secure con utente inserito a mano) oppure **File keyring + password tunnel manuale** (le chiavi Data Secure dal keyring e l’utente/password del tunnel impostati manualmente). Ricorda: i telegrammi KNX Data Secure richiedono sempre un keyring. |
+| Tunnel interface individual address | Visibile quando la modalità selezionata prevede credenziali manuali (Credenziali manuali o File keyring + password tunnel manuale). Indirizzo individuale opzionale dell’interfaccia tunnel sicura (es. `1.1.1`); lascia vuoto per negoziazione automatica da parte di KNX Ultimate. |
+| Tunnel user ID | Visibile quando sono attive credenziali manuali. ID opzionale dell’utente tunnel KNX Secure definito in ETS. |
+| Tunnel user password | Visibile quando sono attive credenziali manuali. Password dell’utente tunnel KNX Secure configurata in ETS. |
+
+> **Nota su KNX Secure**  
+> • *KNX Data Secure* protegge i telegrammi sugli indirizzi di gruppo e richiede sempre un file keyring con le chiavi di gruppo.  
+> • *KNX IP Tunnelling Secure* protegge l’handshake di connessione tramite una password di commissioning, che può essere letta dal keyring oppure inserita manualmente in base alla modalità scelta.
 
 <br/>
 

package/nodes/locales/zh-CN/knxUltimate-config.html

@@ -19,9 +19,14 @@
 | KNX Physical Address | 物理地址，如 `1.1.200`。默认 `15.15.22`。|
 | Bind to local interface | 使用的本地网络接口。"Auto" 自动选择。若有多网卡（以太网/无线），建议手动指定，避免 UDP 丢包。|
 | Automatically connect to KNX BUS at start | 启动时自动连接总线。默认 "Yes"。|
-| Secure credentials source | 选择 **ETS 密钥环文件**（默认）以提供 `.knxkeys` 内容与密码，或选择 **手动凭据** 直接输入隧道 IA 和密码而无需密钥环。切换后仅显示相关字段。|
-| Tunnel interface individual address | 仅在 **手动凭据** 模式下显示。可填写安全隧道接口的 KNX 个人地址（如 `1.1.1`），留空则由 KNX Ultimate 自动协商。|
-| Tunnel user password | 仅在 **手动凭据** 模式下显示。输入 ETS 中配置的安全隧道用户密码。|
+| Secure credentials source | 选择如何提供 KNX Secure 数据：**ETS 密钥环文件**（Data Secure 密钥以及—若存在—隧道凭据来自密钥环）、**手动凭据**（仅启用 KNX IP 安全隧道，手动输入用户）或 **密钥环 + 手动隧道密码**（Data Secure 由密钥环提供，隧道用户/密码手动输入）。注意：KNX Data Secure 报文始终需要密钥环文件。|
+| Tunnel interface individual address | 当所选模式包含手动凭据时显示（手动凭据或密钥环 + 手动隧道密码）。可选的安全隧道 KNX 个人地址（如 `1.1.1`）；留空则由 KNX Ultimate 自动协商。|
+| Tunnel user ID | 启用手动凭据时显示。可选的 KNX Secure 隧道用户 ID（在 ETS 中配置）。|
+| Tunnel user password | 启用手动凭据时显示。输入 ETS 中配置的 KNX Secure 隧道用户密码。|
+
+> **KNX Secure 概览**  
+> • *KNX Data Secure* 用于保护组地址报文，**始终** 需要包含组密钥的密钥环文件。  
+> • *KNX IP Tunnelling Secure* 通过调试密码保护连接握手，密码可以根据模式从密钥环中读取，或在界面中手动输入。
 
 <br/>
 

package/nodes/locales/zh-CN/knxUltimate-config.json

@@ -84,8 +84,10 @@
             "secure_credentials_mode": "安全凭据来源",
             "secure_credentials_mode_keyring": "ETS 密钥环文件",
             "secure_credentials_mode_manual": "手动凭据",
+            "secure_credentials_mode_combined": "密钥环 + 手动隧道密码",
             "tunnel_interface_individual_address": "隧道接口个人地址",
             "tunnel_interface_individual_address_placeholder": "1.1.1",
+            "tunnel_user_id": "隧道用户 ID",
             "tunnel_user_password": "隧道用户密码",
             "ga_list_label": "ETS 组地址列表"
         },

package/package.json

@@ -3,14 +3,14 @@
   "engines": {
     "node": ">=20.18.1"
   },
-  "version": "4.0.4",
+  "version": "4.0.6",
   "description": "Control your KNX and KNX Secure intallation via Node-Red! A bunch of KNX nodes, with integrated Philips HUE control and ETS group address importer. Easy to use and highly configurable.",
   "dependencies": {
     "binary-parser": "2.2.1",
     "crypto-js": "4.2.0",
     "dns-sync": "0.2.1",
     "js-yaml": "4.1.0",
-    "knxultimate": "5.1.0",
+    "knxultimate": "5.1.1",
     "lodash": "4.17.21",
     "mkdirp": "3.0.1",
     "node-color-log": "12.0.1",