The Department of Telecommunication, (DoT) on September 19, 2024, issued Clarification on Security certification for End of Sale (EoS) and End of Life (EoL) products.
The following has been amended-
•End of Sale (EoS) is when an OEM ceases to supply a given product. However, support like hardware/ software modifications of all nature may continue till End of Life.
•End of Life (EoL) may be defined as a date from which further support defined under (i) above from OEM ceases and is not later than 5 years from EoS.
•Products, for which EoS falls before the mandatory date, initial mandatory Security testing is exempted.
•If such exempted products (EoS products) undergo modification, they are permitted to seek a Security certificate valid till EoL by submitting internal test reports of OEM showing conformance to ITSAR.
•Where EoL is reached and OEM does no further modification, all further Security certifications are exempted.
[Notification No. NCCS/HQ/COMSEC/2023-24/III]
