On December 1, 2025, India's National Centre for Communication Security (NCCS) released version 2.0 of the Indian Telecom Security Standard (ITSAR) for Wi-Fi CPE and IP routers.

This new version provides clearer device coverage:

• Wi-Fi CPE: Now explicitly applicable to all types of APs, gateways, and home router products. Any Wi-Fi product with routing, NAT, or packet filtering is classified as a CPE.
• IP Routers: Available for all SDN, Cloud-Native Network Functions (CNF), Virtual Network Functions (VNF) types, and all deployment modes. All IPv4 requirements also apply to IPv6.

The security certification exemption period for Wi-Fi CPE and IP routers is only until March 31, 2026.

Click this link to view the Wi-Fi CPE ITSAR requirements, click this link views the IP router ITSAR requirements.

Following the announcement of India's National Communications Security Centre (NCCS) on August 7, 2025, extending the period of Voluntary Security Certification (VSC) for Optical Network Terminals (ONTs) and Optical Line Terminals (OLTs) to September 1, 2025, the NCCS issued another notice on August 29, 2025, extending the period to December 31, 2025. As of January 1, 2026, these products will be mandatory for ITSAR compliance under the ComSec scheme.

Click on this link to view the original NCCS announcement dated August 29, 2025.

On 21 April 2025, the National Communications Security Centre (NCCS) of India issued the following Indian Telecommunications Security Assurance Requirements (ITSAR):

• ITSAR309062504 - Smart camera;
• ITSAR309052504 - Smart meter;
• ITSAR309072504 - Vehicle tracking device;
• ITSAR702052504 - Class 5 equipment (OLT and ONT passive optical network equipment);
• ITSAR702042504 - Class 4 equipment (Wi-Fi CPE, IP routers, Cell Broadcast Centers and Dedicated Automatic Exchange Extensions);
• ITSAR702012504 - Category 1 equipment (including 23 types of 5G network function equipment, see the original text for details);
• ITSAR309042504 - Feedback device.

Click on the above standard number to view the original text of the corresponding standard.

On April 7, 2025, India's National Communications Security Centre (NCCS) issued a notice announcing that Optical Network Terminal (ONT) and Optical Line Terminal (OLT) products will be included in the Voluntary Security Certification (VSC) regime with an extension until August 31, 2025. As of September 1, 2025, ONT and OLT products must be certified under the ComSec scheme by mandatory ITSAR. This notice supersedes the notice dated December 6, 2024, which allows for voluntary certification to be valid until March 31, 2025.

Click this link to view the original NCCS notice.

On December 6, 2024, India's National Communications Security Centre (NCCS) issued a notice announcing that Optical Network Terminal (ONT) and Optical Line Terminal (OLT) products can be certified under the Voluntary Security Certification (VSC) regime until 31 March 2025. From April 1, 2025, these products must pass the ITSAR mandatory certification under the ComSec program.

Click this link can be found in the original notice.

On November 29, 2024, India's National Communications Security Centre (NCCS) issued a memorandum informing that cloud-implemented IP routers and Wi-Fi CPEs will be exempt from security certification until May 31, 2025.

Click this link to view the original memorandum .

On October 24, 2024, India's National Communications Security Centre (NCCS) published amendments to the Wi-Fi CPE ITSAR. Wi-Fi CPE ITSAR has been revised to accommodate the technical changes that split the Wi-Fi CPE into legacy configurations and Wi-Fi CPE components hosted in the cloud.

Click on this link to view the original NCCS revision announcement.

On July 19, 2024, the National Centre for Communications Security (NCCS) of India issued a notice announcing the commencement of mandatory security certification (MSC) for 5G Session Management Functions (SMFs) from January 1, 2025.

The 5G SMF voluntary security certification, which will take effect from June 1, 2024, will end on December 31, 2024.

Click this link to view the original notification.