DoT clarification on Security certification for End of Sale (EoS) and End of Life (EoL) products

Dot vide notification dated 19-09-2024 has issued clarification on Security certification for End of Sale (EoS) and End of Life (EoL) products. With respect to products notified under various phases of MTCTE, for which End of Sale (EoS) and/or End of life (EoL) has been notified by OEM, following clarification with respect to ComSec Scheme is issued:

1. End of Sale (EoS) is defined as a date from which an OEM ceases to supply a given product. However, support like hardware/ software modifications of all nature may continue till End of Life.
2. End of Life (EoL) may be defined as a date from which further support defined under OEM ceases and is not later than 5 years from EoS.
3. Products, for which EoS falls before mandatory date, initial mandatory Security testing is exempted.
4. If such exempted products (EoS products) undergo modification, they are permitted to seek a Security certificate valid till EoL by submitting internal test reports of OEM showing conformance to ITSAR.
5. Where EoL is reached and no further modification is done by OEM, all further Security certifications are exempted.