NCCS Certification for Telecom Equipment Security
NCCS certification is the security certificate the National Centre for Communication Security issues after your telecom product is tested against the Indian Telecom Security Assurance Requirements (ITSAR). Products such as IP routers and Wi-Fi CPEs need it before they are sold in India. We register you on the portal, coordinate the security lab and file the application.
What it is
The National Centre for Communication Security (NCCS) works under the Department of Telecommunications (DoT). It writes security requirements for telecom equipment, called ITSARs, designates Telecom Security Testing Laboratories (TSTLs) and certifies products that pass. NCCS lists 62 published ITSARs, covering items from routers and customer premises equipment to 5G core network functions.
The legal base is Section 19 of the Telecommunications Act, 2023 and the Telecommunications (Framework to Notify Standards, Conformity Assessment and Certification) Rules, 2025, notified as G.S.R. 315(E) on 16 May 2025. These rules name both TEC and NCCS as appropriate authorities. Applications run through the MTCTE portal, the same portal used for TEC’s MTCTE certification.
Who it applies to
Indian manufacturers
An Indian OEM making routers, Wi-Fi CPEs, optical network terminals or other equipment covered by a mandatory ITSAR applies in its own name.
Foreign OEMs, through an AIR
A foreign manufacturer applies through an Authorised Indian Representative (AIR), backed by an MoU between the two.
Importers and service providers
The NCCS procedure also names importers, dealers and service providers. Telecom licensees deploying equipment in their networks need it certified.
Why it matters
No certificate, no sale
Under Rule 8(2) of the 2025 Rules, equipment covered by a notified standard cannot be sold or deployed without a valid certificate of conformity assessment.
Operators ask for it
Telecom operators buying network gear check security certification alongside trusted source approval.
Security is tested, not assumed
An independent TSTL checks your product against each ITSAR clause, and NCCS evaluates the report.
Documents required
About the applicant
- Certificate of incorporation or registration of the Indian entity
- Authorisation letter for the person signing
- For foreign OEMs: authorisation and MoU with the AIR
- Import Export Code, if you import the product
About the product
- Model and variant details, with any associated models
- Bill of Materials with software versions and hardware components
- Product documentation for the TSTL
Compliance papers
- Applicable ITSAR and its version
- Declaration of conformance, where a Pro Tem certificate is sought
- Existing TEC MTCTE certificate, if held
NCCS security vs TEC MTCTE
| NCCS security certification | TEC MTCTE certification | |
|---|---|---|
| What it checks | Security, against ITSARs | Safety, EMI/EMC, technical and interface requirements |
| Who tests | NCCS-designated TSTLs | TEC-designated conformity assessment bodies |
| Portal | MTCTE portal | MTCTE portal |
| Who certifies | NCCS | TEC |
Many products need both. A Wi-Fi router, for example, needs TEC certification under MTCTE and an NCCS security certificate under the ITSAR for Wi-Fi CPE. Here is the catch: plan them together, or one certificate can hold up the other.
How it works
Map the product to an ITSAR
We check whether a published ITSAR covers your product, which version applies and whether security certification is mandatory for it.
Register on the MTCTE portal
We set up the company account with incorporation papers, authorisations and, for foreign OEMs, the AIR documents.
Book a TSTL and get tested
You choose a designated TSTL. Under the NCCS procedure, testing is to be completed within 16 weeks, including time for you to fix any gaps it finds. The lab, not us, runs the tests.
Apply for a Pro Tem certificate if eligible
For IP routers, Wi-Fi CPEs, 5G Core SMF, optical line terminals, optical network terminals and new launches, a declaration of conformance gets you a Pro Tem certificate while testing continues.
Submit the report and receive the certificate
The TSTL submits its report. NCCS normally issues the certificate within 4 to 8 weeks of receiving complete test results.
Timelines
16 weeks for TSTL testing
The procedure gives the TSTL 16 weeks to complete testing, including your fixing time.
Pro Tem certificate valid 2 years
DoT raised Pro Tem validity from six months to two years in December 2025. You undertake to fix any shortfall found in testing within that validity.
Five-year certificate, renew a month ahead
The NCCS procedure sets a five-year validity for security certificates. Apply for renewal at least one month before expiry, if the ITSAR and model are unchanged.
What happens if you sell without it
You must stop sales
Rule 12(1) of the 2025 Rules requires a non-compliant product to be discontinued within 7 days of being told.
Stock can be seized
Rule 12(3) allows proceedings for seizure and destruction of non-compliant equipment.
Certificates can be cancelled
NCCS may suspend or cancel a certificate if it learns of a breach of the guidelines or rules.
Frequently asked questions
Which products need NCCS security certification?
Products covered by an ITSAR that DoT has made mandatory need it before sale. IP routers and Wi-Fi CPEs were the first, with applications opening from 1 July 2024. Optical network terminals followed under a simplified procedure from 1 January 2026. NCCS has published 62 ITSARs, but not all are mandatory yet. Picture a Faridabad router maker preparing a launch. Send us the product details and we will confirm its status first.
What is a Pro Tem security certificate?
It is a temporary certificate issued on a declaration of conformance while your product is tested at a TSTL. It was introduced in October 2024 with six-month validity, raised to two years in December 2025. It covers IP routers, Wi-Fi CPEs, 5G Core SMF, optical line and network terminals, and new product launches. You undertake to fix any shortfall found. Sales keep moving while testing runs.
Is NCCS certification the same as TEC certification?
No, they are separate certificates from separate authorities. TEC’s MTCTE certificate covers technical, safety and EMI/EMC requirements. NCCS certifies security against ITSARs. Both run on the MTCTE portal, and both draw their power from the 2025 Rules under the Telecommunications Act, 2023. Many products, such as routers, need both. We plan the two together so one does not delay the other.
Can a foreign manufacturer apply directly?
No, a foreign OEM applies through an Authorised Indian Representative (AIR). The AIR is an Indian entity appointed by the OEM, backed by an MoU between them, and holds the account on the MTCTE portal. If you are an Indian importer or distributor, you can take on this role. We help set up the AIR paperwork and registration, so the application starts on a clean footing.
How long does NCCS certification take?
The NCCS procedure gives the TSTL 16 weeks to complete testing, including the time you need to fix any gaps. After complete test results reach NCCS, the certificate normally follows within 4 to 8 weeks. For eligible products, a Pro Tem certificate lets you sell during this period. In practice, booking the lab early saves the most time.
Do software updates need a new certificate?
Not always. Under the NCCS procedure, a software patch may be deployed with a temporary certificate, issued normally within 7 working days and valid up to one year or until the main certificate expires, whichever is earlier. Associated models with identical software and a hardware subset of the certified model can be certified without fresh testing. Tell us about the change and we will advise the route.
What are the NCCS fees?
NCCS charges a security test report evaluation fee, and the TSTL charges separately for testing. In July 2025, DoT announced a cut of up to 95% in security test evaluation fees. The schedule has changed recently, so we confirm the current fee for your product category before you apply. You will know the full cost before committing.
What happens if we sell uncertified equipment?
Under Rule 8(2) of the 2025 Rules, notified equipment cannot be sold or deployed without a valid certificate. Rule 12(1) requires a non-compliant product to be discontinued within 7 days of notice, and Rule 12(3) allows proceedings for seizure and destruction. Getting the Pro Tem certificate in place early avoids all of this.
Does Taxhint test the equipment?
No. Testing is done only by NCCS-designated TSTLs, and NCCS evaluates the results and issues the certificate. We handle the paperwork side: portal registration, AIR documents, the application, TSTL coordination, Pro Tem declarations and renewal tracking. Your engineers deal with the lab on technical points, and we keep the file moving.
What it costs
Our fee plus the government fee that applies to your case, quoted before you commit. Tell us the situation and we will price it exactly.
NCCS charges an evaluation fee for the security test report, cut by up to 95% in July 2025. TSTL testing charges are paid to the lab directly.
Ready to begin?
Send us the product model and its ITSAR category, and we will set out the TSTL, Pro Tem and certificate route.