Blog EAC Certificate for Hardware and Software

EAC Certificate for Hardware and Software

An EAC certificate for hardware or software is a governmental confirmation of EAC compliance with the TR CU/EAEU regulations. An EAC certificate for hardware or software is a governmental confirmation of EAC compliance with the TR CU/EAEU regulations.

EAC Certificate for Russia and EAEU Member States 

An EAC Certificate or an EAC Declaration are the state confirmations of EAC conformity. Through EAC certification or EAC declaration, the manufacturer is confirmed that the certified/declared products comply with the safety requirements of the TR CU regulations of the EAEU states. 

An EAC Approval is carried out by accredited certification service providers in the EAEU member states and is registered in the unified register.

The abbreviation E-A-C stands for: Eur-Asian-Conformity. The EAEU states are a trade and economic union between Russia, Kazakhstan, Belarus, Kyrgyzstan, and Armenia. In the territory of the EAEU member states, common customs tariff regulations, uniform trade regulations, and harmonized technical regulations apply.

FSB Notification of Software and Hardware

The FSB Notification for software and hardware from the Federal Security Service (FSB) is a state confirmation of the notification of the security service regarding the use of encryption technologies in imported devices.

The FSB Notification can only be applied for and carried out by companies based in the EAEU member states. A German or European manufacturer can only apply for and carry out the FSB Notification through an authorized representative.

Application of the FSB Notification for Russia

The purpose of the FSB Notification is the registration, examination, and control of hardware and software. This includes electronic end devices used in civilian and military organizations.

The FSB Notification allows the marketing of hardware and software in Russia and EAEU states. Manufacturers or their authorized representatives are legally obliged to carry out the FSB Notification of hardware and software in accordance with the legal regulations of the Russian Federation. 

Changes to already regulated devices and systems must also be reported to the authorities in a timely manner.

The regulation of the EAEU Economic Commission dated April 21, 2015 - On the Measures of Non-Tariff Regulation lists all devices and systems that require notification.

FSB Notification is required for the following product groups:

  • Computers, laptops, tablets.
  • Smartphones, mobile phones.
  • Wireless mice and keyboards.
  • Servers with pre-installed software.
  • Devices with pre-installed software.
  • PDAs with encryption functions.
  • Wireless devices with Wi-Fi or Bluetooth.
  • Key machines, radios, high-frequency devices.
  • Television, radio, etc. with Wi-Fi or Bluetooth function.
  • Printers, copiers, and fax machines and their electronic modules.
  • Devices for recording, playback, and visualization of data.
  • Electronic modules and parts of pocket computers with encryption functions.
  • Electronic integrated circuits, storage devices with encryption functions.
  • Access devices to information and communication networks and television receivers.
  • Broadcasting or television devices that have encryption functions.
  • Radio navigation, remote control devices with encryption functions.
  • Documents for the cryptographic transformation of information.
  • Telecommunications devices with encryption functions.
  • Communication devices with encryption functions.
  • Computer accessories with encryption functions.
  • Calculating machines with encryption functions.
  • Base stations with encryption functions.

All devices and systems with Wi-Fi or Bluetooth functions are subject to FSB Notification.

Documents for FSB Notification of Hardware and Software

  • Encryption algorithm
  • Original product designation
  • Detailed product description
  • Key length of the algorithm
  • Certificates such as CE, ISO, EAC, GOST
  • User manual
  • Customs tariff number

The FSB Notification must include the following information:

  • Product designation
  • Purpose of the product
  • Information about the manufacturer
  • Used cryptographic algorithms
  • Non-registered functions
  • Duration of the notification
  • Information about the authorized representative

Process of FSB Notification

The FSB Notification consists of five steps. First, an application for the FSB Notification is submitted to the Federal Security Service of the Russian Federation (RF). Then, the documents are reviewed and the products are tested. If the products pass the tests, the FSB Notification is issued and registered in the accreditation register. 

The process of FSB Notification consists of the following steps:

  1. Application submission
  2. Review of documents
  3. Testing of products
  4. Entry into the register
  5. Issuance of the FSB Notification

GOST Certificate for Software and Hardware

On August 5, 2020, the Russian accreditation and certification authority Rosstandard proposed the first national GOST standards for the digital industry.

GOST Standards for Digital Products:

  1. Digital architecture of digital products
  2. Information exchange of digital products
  3. General provisions for digital production
  4. Unified architecture for digital production
  5. Digital representation of physical product elements
  6. Interfaces for the management of digital productions
  7. Interoperability units for industrial application solutions

The main goal of the new GOST standards is the implementation of digital technologies in the Russian and Eurasian economy.

EAC Approval for Digital Technologies

The new EAC approvals for digital production were developed for the virtual representation and implementation of real production processes. The representation of production processes includes all production steps from goods production to personnel management. 

The modeling of production processes significantly improves the planning and efficiency of production processes and workflows.

Duration and Costs of EAC Approval

The duration of EAC approval for software and hardware depends heavily on the respective products and industries. On average, EAC approval for hardware and software takes about 25 to 30 working days.

The costs of EAC approval for hardware and software generally consist of several factors: the regulations of the TR CU guidelines, the number of mandatory tests, and whether all required source documents are available in the correct language.

Authorized Representative for EAC Certification

In the EAEU member states, it is required that the foreign manufacturer must have a presence in the common EAEU economic area in order to apply for EAC approval. Thus, an authorized representative of the foreign manufacturer is needed to carry out the EAC approval in the EAEU member states.

The authorized representative of the foreign manufacturer must have a business presence in one of the EAEU member states (Russia, Kazakhstan, Belarus, Kyrgyzstan, and Armenia). We offer the services of our authorized representative. This task can be carried out by our Russian branches in Moscow or Novosibirsk. 

Contact Us