India: Mandates Device Hardening Rules

Home / Country Update / India: Mandates Device Hardening Rules

The National Centre for Communication Security in India has issued a new notification regarding the hardening of devices for security testing and certification. Released on March 11, 2026, this directive outlines mandatory procedures that Original Equipment Manufacturers must follow to comply with the Indian Telecom Security Assurance Requirements. The notification aims to standardize how telecommunication equipment is secured before undergoing formal security evaluations at designated testing laboratories.

india pointed out with green pointer on blue world map

Requirements for the Hardening Guide

Under the new guidelines, applicants must provide a specific hardening guide to the Telecom Security Testing Laboratory prior to the commencement of any testing. This guide must not consist of general user advisories but must contain the exact commands and configuration steps required to harden the device. Furthermore, the applied hardening configurations must persist even after the device is rebooted. The testing laboratory is responsible for applying this entire hardening procedure before beginning the security evaluation on the Device under Test.

Testing and Compliance Recording Procedures

During the evaluation process, all security testing will be performed on the fully hardened device as specified by the manufacturer. The testing laboratory must clearly record in the test report whether the device complies with each security clause due to the applied hardening or if it meets the requirements in its default condition. This distinction will also be captured in the national certification portal to maintain transparent compliance records.

For this article’s source information and any product certification guidance, please contact Global Validity. 

Quick Country Facts

India

Certification Body: Ministry of IT and Communications, Wireless Planning & Coordination Wing

Certification Type: Mandatory

License Validity: Indefinite

Application Language: English

Legal License Holder: Local Representative

In-Country Testing Requirement: Testing Not Required

The regulatory information above is based on radio type approval certification. Access additional certification requirements in over 200 countries and territories with Global Validity’s free proprietary product certification management software, Access Manager. Learn more about the platform here or fill our quick contact form! 

Global Validity is your partner for global certification success

Want to learn more about regulatory compliance and how we can help? Simply fill out the form below and we’ll be in touch!