INMETRO Certification for ICP-Brasil Digital Certification Equipment

Published in 2021, Ordinance Number 130, issued by the National Institute of Metrology, Quality, and Technology (INMETRO), approves the conformity assessment requirements for ICP-Brasil standard digital certification equipment. This standard is the Brazilian Public Key Infrastructure, a national hierarchical chain that allows the creation and use of digital certificates in the country.

ICP-Brasil digital certificates are electronic documents that identify an individual or legal entity in digital media, in addition to enabling the virtual signing of documents and the validation of specific transactions. These certificates are essential for the legal validity of applications that require the identification and authentication of an individual or legal entity.

Under the agreement established between INMETRO and the National Institute of Information Technology (ITI), products and equipment in the digital certification sector that fall within the scope of ICP-Brasil must undergo a conformity assessment conducted by an INMETRO-accredited Product Certification Body (PCB).

The following equipment is included when used within the scope of ICP-Brasil:

• Encrypted cards (smart cards)
• Smart card readers
• Hardware security modules (HSM)
• Encrypted tokens

Ordinance Number 130 does not address the application of standards issued by the International Electrotechnical Commission (IEC), the International Special Committee on Radio Interference (CISPR) or Brazilian Standards (NBR) from the Brazilian Association of Technical Standards (ABNT). It establishes two different certification models, and the customer must determine which one to use. These two models are:

• Certification model No. 4 – Initial assessment consisting of tests on samples taken at the manufacturer’s location, followed by a periodic maintenance assessment through product sampling at the manufacturer’s facility.
• Certification model No. 5 – Initial assessment consisting of tests on samples taken at the manufacturer’s facility, including a Quality Management System (QMS) audit, followed by a periodic maintenance assessment through product sampling at the manufacturer’s facility and a QMS audit.

Testing is performed in accordance with the ICP-Brasil Standard – DOC-ICP-01.01 and the Technical Conduct Manuals. It is focused on the interoperability and safe operation of ICP-Brasil Standard Digital Certification Equipment.

UL Solutions is an INMETRO-accredited PCB and can support you with your project.