ONT Optical Network Terminal New Model Certification

All new ONT models in India must comply with ITSAR security certification under the NCCS ComSec scheme, with mandatory certification effective from January 1, 2026.

Certification Overview

Optical Network Terminals (ONTs) are subscriber-end devices in Passive Optical Networks (PON) and require ITSAR security certification to ensure compliance with national telecom security standards . The Voluntary Security Certification (VSC) phase was available until December 31, 2025, allowing manufacturers to prepare devices ahead of mandatory enforcement . From January 1, 2026, all new ONT models must obtain mandatory certification before deployment with major operators such as BSNL, Bharti Airtel, Reliance Jio, and Vodafone Idea .

Key Requirements for New Models

1. Unique SoC + SDK Combination: Mandatory security testing is required only for ONT models featuring a new System-on-Chip (SoC) and Software Development Kit (SDK) combination. Variants using the same SoC-SDK combination as an existing certified model are automatically covered .
2. Self-Declaration of Conformity (SDoC): OEMs must submit an SDoC detailing all customizations, software hash values, and variant information. Updates to existing certificates for new variants with the same SoC-SDK combination can be approved without additional testing, provided the SDoC is updated .
3. Software Updates: Any change to the SoC or SDK is treated as a software update under Section 7 of the Security Certification Procedure, requiring appropriate documentation .
4. Operator Acceptance: Certification is mandatory for deployment with major telecom operators, ensuring devices meet security and interoperability standards .

ONU Certification Alignment

From January 1, 2026, Optical Network Units (ONUs) are subject to the same ITSAR requirements, notifications, and certification procedures as ONTs. This ensures uniform security compliance across PON device families .

Testing and Certification Process

• Testing is conducted by NCCS-accredited Telecom Security Test Labs (TSTLs), such as Deltaphi Labs, which provide end-to-end security testing, documentation, and certification services .
• Standards referenced include ITSAR ONT Security Requirements v1.0, 3GPP TS 33.117, NIST SP 800-115, and ISO/IEC 27001 for infrastructure and information security controls .
• Fast-track testing options are available to accelerate certification cycles and reduce time-to-market .

Application Process

• Applications for certification or SDoC submission are made through the MTCTE online portal accessible via the NCCS website .
• For new models, ensure all customizations and software versions are clearly documented to facilitate smooth approval.

Summary

For new ONT models in India, manufacturers must:

• Obtain ITSAR certification for any new SoC + SDK combination.
• Submit SDoC for variant updates.
• Ensure compliance with NCCS security standards.
• Align ONU devices under the same certification framework.
• Complete certification before deployment with operators from January 1, 2026 onward . This framework ensures enhanced security, regulatory compliance, and operator acceptance for all PON subscriber devices.