cross-posted from: https://scribe.disroot.org/post/6164123
A security doctrine published by the European Commission has identified solar inverters from Chinese suppliers as a high-risk dependency.
The document, on how to strengthen EU economic security [opens pdf], outlines how the bloc plans to react to growing external economic threats. It says the commission’s immediate focus will be on six priority high-risk areas, identified as reducing strategic dependencies for goods and services; attracting safe investment into the EU; supporting Europe’s defence, space and critical industrial industries; securing EU leadership across critical technologies; protecting sensitive data and shielding Europe's critical infrastructure.
The communication goes on to specifically highlight reliance on solar inverters as an example of a security risk due to supplier concentration, cyber-manipulation risks, access to grid-relevant operational data and the possibility of actors infiltrating supply chains. Today, around 80% of Europe’s PV systems rely on Chinese inverters.
...
Mainstream semiconductors, battery electric vehicles, key components for drones and detection equipment at EU borders are listed as other high-risk dependency areas in the communication.
The European Solar Manufacturing Council (ESMC) has released a statement saying it strongly supports the strategic shift outlined in the document.
...
The council says it particularly welcomes the council’s intention to “support the development of trusted suppliers of critical subcomponents in the EU and in trusted third countries so that there are viable alternatives” and reiterated that European and other Western manufacturers remain on the technological forefront, with the manufacturing capacity to meet all of European demand.
ESMC is calling for a series of actions, including the establishment of an EU-level whitelist of trustworthy inverter vendors based on cybersecurity and jurisdictional risk criteria that is integrated into NIS2, the ICT supply‑chain toolbox, NZIA Articles and all relevant EU network codes. It also says EU member states should be permitted to deny grid connection to inverter hardware from high-risk vendors.
...
The council has established an Inverter, Storage and Energy Management Systems Forum, open to ESMC members and eligible Western non-members, that it says will work with grid operators, energy-security agencies, standardization bodies and other stakeholders to advance Europe’s digital and energy resilience.
...
Focusing only on the inverter brand isn’t enough. The origin of the internal components matters just as much.
I recently read an article (March 2025) about Asian (read Chinese) PCBs and the security risks involved. One key finding was that it is technically possible to embed additional components inside the inner layers of multilayer PCBs, such as espionage chips or sabotage elements (e.g. fuses that can short a circuit). These can be extremely hard, sometimes impossible, to detect—even with X-ray inspection. The article also describes how subtle design weaknesses can enable side-channel attacks that leak information via physical or logical side effects rather than direct data access.
Article (German): https://www.all-electronics.de/elektronik-fertigung/warum-asiatische-leiterplatten-so-guenstig-und-gefaehrlich-sind/725088
On top of that, there have already been documented cases where undocumented communication devices were found in Chinese-made solar inverters—hardware that was not part of the original design:
https://www.reuters.com/sustainability/climate-energy/ghost-machine-rogue-communication-devices-found-chinese-inverters-2025-05-14/
This means an inverter doesn’t even need an active internet connection to be a potential risk.
In a worst-case scenario, manipulated inverters could theoretically be used to disable large numbers of PV systems at once, potentially destabilising parts of the power grid. That’s why the EU security discussion should not stop at “Chinese inverters” but extend to the full supply chain, including PCBs and embedded components.