Required Certifications for Hardware Security Module (ADPM)

Hardware Security Module for the Indian Market: An Insight 

A Hardware Security Module (HSM) is a hardware device with specialized tamper-resistant features for generating, storing, and managing cryptographic keys securely. These are used for encryption, decryption, and digital signatures. Businesses must get the BIS CRS Registration for Hardware Security Module before selling them in the Indian market. This functions as a highly secure digital vault to safeguard sensitive information from unauthorized access or cyber threats. HSMs are widely used by banks, financial institutions, government agencies, etc. Along with BIS CRS, EPR Registration is also mandatory for proper recycling and disposal of electronic products after their final use and for waste management. 

Key Highlights

What are the required certifications for a Hardware Security Module to sell in India?

BIS CRS Registration and EPR Certification are required for the sale of Hardware Security Module in the Indian market. The manufacturers and importers must go through the following details to get the registrations done smoothly:

1. BIS CRS Certification for Hardware Security Module 

BIS CRS registration is mandatory for the legal sale of a Hardware Security Modulein the Indian market. The manufacturers (Indian and Foreign) must obtain the certificate to ensure safety and compliance with the Indian Standard IS 13252 (Part 1): 2010 (valid till 1 Nov 2028), IS/IEC 62368-1:2023 (updated IS). It defines the safety standards that must be complied with for the sale of the product. Non-compliance with the Indian standard can result in fines, product seizures, and business finance loss. So, a BIS CRS registration, mandatory for a Hardware Security Module to sell in India, is a required compliance for the market.

What are the consequences of not having a BIS CRS Certificate? Click here to know more.

2. EPR Registration for Electronics for Hardware Security Module 

A Hardware Security Module falls under the ITEW 1 category in India’s E-Waste Management Rules. EPR Certification for e-waste issued by the Central Pollution Control Board (CPCB) is mandatory for manufacturers and importers before selling the Hardware Security Module in the Indian market. They must do proper collection, recycling, and safe disposal of the product after reaching the end of its life. It protects the environment and reduces the harmful impact of unmanaged electronic waste. Hence, an EPR registration, mandatory for Hardware Security Modules before selling them in the Indian market, is a required compliance in the Indian economy.

What will happen if you are selling without an EPR license for electronics? Read here.  

How to Get the Certifications for a Hardware Security Module in India?

1. BIS CRS Registration

Required Documents for a BIS CRS License for a Hardware Security Module 

Here is the list of required documents that need to be prepared in advance to obtain a BIS CRS license for various IT and electronic products in India.

1. Trademark / Brand Registration Certificate
2. Factory Address Proof
3. Product Test Report (BIS-approved lab)
4. PCB Layout & Critical Component List (CCL)
5. Product User Manual
6. AIR Appointment Letter (for foreign manufacturers)

Process for BIS CRS Registration for a Hardware Security Module 

Have a look at the step-by-step guide to obtain a BIS CRS registration efficiently and without unnecessary complications.

1. Prepare Documents
2. Test Product
3. Apply Online
4. Grant of BIS CRS Registration 

2. EPR Certification for Electronics

Required Documents for EPR License for a Hardware Security Module 

The following is the list of CPCB-specified documents that all applicants seeking an EPR (Extended Producer Responsibility) license for e-waste management in India must carefully address.

1. Basic documents related to the Firm / Company
2. Details of the authorised signatory
3. Product details and specifications
4. Plans and flowcharts for the collection and recycling of Electronics
5. CTE/CTO consents, Agreement copies 

Process for EPR Registration for a Hardware Security Module 

All manufacturers, importers, and brand owners of Electrical and Electronic Equipment (EEE) must follow the structural framework outlined by the Central Pollution Control Board (CPCB) to ensure EPR (Extended Producer Responsibility) compliance in the Indian market. Check out the steps set by CPCB to get EPR registration smoothly and efficiently.

1. Prepare documents
2. Submit application
3. Review and verification
4. Grant of Certification

 BIS CRS Certification Guidelines for Indian Manufacturers

1. Ensure the product is under the BIS CRS Mandatory List and tested by a BIS-recognized lab.
2. Prepare required documents and use the R-Number mark only after approval.
3. Professional assistance can help simplify the process.

BIS CRS Certification Guidelines for Foreign Manufacturers

1. Appoint an Authorized Indian Representative (AIR) as required by BIS.
2. Get product testing done in a BIS-recognized lab in India and prepare documents.
3. Submit the application through AIR for approval.

Need complete knowledge about the certification? Click to view the complete guidebook. 

 BIS CRS Certification Guidelines for Indian Importers

1. Importers cannot apply directly; only manufacturers are eligible for BIS CRS.
2. Obtain and maintain the BIS license copy from the manufacturer.
3. Can act as AIR if authorized by the manufacturer.

 BIS CRS Certification Guidelines for Traders

1. Not eligible to apply directly; certification must be done by the manufacturer.
2. Keep a copy of the BIS license for compliance.
3. Can act as AIR if authorized.

 BIS CRS Certification Guidelines for Online Sellers

1. Not eligible to apply directly; registration must be done by the manufacturer.
2. Obtain a BIS license copy from the manufacturer for compliance.
3. Ensure certification before listing products online.

Check your eligibility for the Hardware Security Module for the Indian market now!

Guidelines for EPR Certification for the Hardware Security Module 

For Producers (Importers)

1. Must obtain mandatory EPR compliance from the Central Pollution Control Board before selling or importing products.
2. Fulfill e-waste collection and recycling targets as per CPCB norms.
3. Ensure compliance through authorized recyclers and maintain records with annual return filing.

For Recyclers

1. Must have authorization from CPCB/SPCB to operate.
2. Follow E-Waste Management Rules and CPCB guidelines for recycling.
3. Issue recycling certificates and maintain records with annual returns.

For Refurbishers

1. Registration and authorization from CPCB/SPCB are mandatory.
2. Carry out refurbishing as per E-Waste Management Rules and CPCB guidelines.
3. Maintain records and file annual returns on the CPCB portal.

For Manufacturers

1. EPR registration on the CPCB portal is mandatory before manufacturing.
2. Meet e-waste collection and recycling targets set by CPCB.
3. Ensure compliance through authorized recyclers and maintain records with annual filings.

Brand Liaison: Making Product Compliance Simple

Brand Liaison is the leading product compliance consultant that assists manufacturers of Hardware Security Modules to get BIS CRS registration and EPR certification for selling and importing in the Indian market in a hassle-free manner. Our expert team specializes in meeting the compliance requirements and ensuring timely approvals.

• Professional Guidance
• Technical support
• Assistance in product testing
• Helps in Coordination with authorities
• Post-compliance support

As the trusted consultant in India, we help the manufacturers and importers of Hardware Security Modules stay fully compliant with the prescribed standards. Contact Brand Liaison today for a smooth and stress-free product compliance journey.