РусскийEnglish中文

Russian FSS notification (Federal Security Service notification)

is the notice obligatory for the registration of programs or hardware devices used for enciphering and as a means of cryptography according to the section 2.19 of the Uniform inventory, to which a ban or restrictions on import or export by member states of the Customs Union within the Eurasian Economic Community in trade with the third countries are applied. The FSS notification is necessary for various computers and computing equipment with encryption functions (cryptography):
  • Printers, copiers & electronic modules;
  • Pocket machines & mobile phones;
  • Cash registers;
  • Servers & portable computers;
  • Electronic modules & parts;
  • Electronic integrated circuits & memory devices;
  • Software encryption (cryptographic) means.

The Federal Security Service notification is also necessary for wired and wireless means of communication with encryption functions:
  • User communication devices;
  • Base stations & access points;
  • Telecommunications equipment & parts;
  • Radio-broadcasting or television equipment;
  • Radionavigation receivers & remote control equipment;
  • Equipment for access to the Internet & television receivers with a communication function.




In some cases, FSS notification is not obligatory; such cases belong to exceptions of the general order. Cases of the import of computer facilities in which all cryptographic functions are realized by a program, without preset software, belong to these exceptions. Federal Security Service notification in this case shall be executed on the cryptographic software.

In addition, FSS notification is not necessary for means of communication with transparent encoding of information that does not require knowledge of the secret key to decode it. It is also not necessary to register a new notification for goods that have previously been registered for Federal Security Service notification - for the legal import of such goods, it is enough to specify information about the previously registered FSS notification.

Document title:Russian FSS notification
Maximum validity:no limits
Document is required for:customs clearance, realization
Document is issued to:manufacturer or authorized entity
Tax:no
Lead time:10 working days
Price:USD 200


The provisions of international agreements take precedence over the relevant Russian laws and regulations do not supersede national legislation in this area. Therefore, the Federal Security Service notification is usually not the only necessary permit. According to international or national legislation, the Russian EAC certificate, the Russian CCC certificate, the Russian RFC certificate or a Russian EAC license can be demanded in addition.




Получить Российский Нотификация ФСБ   得到俄罗斯 FSS通知
Average rating: 5 Best rating: 5 Rating count: 6
Ask a question or make a comment
Name:     Email:
Question:
Hello - we are looking to ship 20 Microsoft Surface Pro 4 tablets to clinical sites in Russia but the FSB is expiring at the end of the month. How do we get that extended?
Lindsey 12/16/2019 9:48:54 PM
Show answer
Hide answer
Answer:
Dear Lindsey,
You can prolong the FSB notification only if you have a PoA from the manufacturer (Microsoft). AFAIK the ending of the notification is coherent with the life cycle for this product
Certificate.Net Expert 12/17/2019 3:45:12 PM
Question:
Dear Sir or madam, Is standard WPA/WPA II encryption used for WiFi modules subject to FSS notification? Kind regards, Sebastian
Sebastian Antoni 12/5/2019 10:08:24 AM
Show answer
Hide answer
Answer:
Dear Sebastian,
Sure, Wi-Fi WPA is a wireless encryption standard, so it requires the FSS notification to be registered. Individuals may import Wi-Fi devices as a personal items without any restrictions.
Certificate.Net Expert 12/5/2019 12:49:40 PM
Question:
Hello, we are an Industry PC manufacturing company. We produce products in Taiwan and going to sell to Russia. One of our clients is concern about the product which content the wifi-module inside the PC. Could I know does this product will be consider the encryption product and need to apply any additional certificates? Or it will only depends on the which HS-code I applied. Thank you in advance.
Paula 9/19/2019 5:58:36 AM
Show answer
Hide answer
Answer:
Hello Paula,
Usually PCs need FSS notification to be registered because of Wi-Fi or installed software encryption. The HS customs code will be applied by the Russian customs independently, so we can’t guess it now. It’s likely that this HS code will be from the section 2.19 of the “Single list of goods subject to prohibitions or restrictions on import or export by the Customs Union member states within the EurAsEC”.
Certificate.Net Expert 9/19/2019 3:31:36 PM
Question:
Hello, We are an IT Distributor company based in USA and selling 32Gb Fibre Channel HBAs to Russia. We have a freight forwarder in place but no one sure which paperwork needed for the customs to get this shipped smoothly. Would you be able to advise? Thanks so much, Natalia
Natalia 3/20/2019 6:25:48 PM
Show answer
Hide answer
Answer:
Hello Natalia,
The paperwork for any product depends on EAC HS-code. Usually HBAs do not need any additional certificates or permissions for customs clearance. Because they are safe (very low voltage), have no encryption, have no radiofrequency devices.
Certificate.Net Expert 3/21/2019 10:04:03 AM
Question:
Hello, we're a french digital signage integrator. We assemble in France mini-PC (buyed from China through resellers/distributors) with a Windows 7 Embedded or Windows 10 IoT license + a digital signage software player (from a French company). All of these includes crytographic features (TPM, TLS certificate, ...) but not necessarily used. As we currently deploy digital screens + players (PC described above) for an international customer that have some sites in Russia, we would like to know if an EAC certificate is needed to pass customs. Can we claim any certificates from the manufacturer and those from the publishers (operating system and digital signage software)?
Sylvain 2/25/2019 8:39:15 PM
Show answer
Hide answer
Answer:
Hello Sylvain,
Any electrical equipment with power source above 75V DC or above 50V AC needs a EAC certificate or declaration of conformity. PCs with remote wireless administration should have the EAC certificate too. For encryption devices you should have a registered FSS notification. If your product is labeled by your company - then it’s a new product with new manufacturer. So you can’t use any certificates from other manufacturers.
Certificate.Net Expert 2/1/2019 12:11:32 PM
Question:
Hello, we have Cash Desks. This is only a small PC with Windows and our POS Software installed. There are no TPM or any other encryption Software. Do we need a Notication here? Aaron
Aaron 1/31/2019 4:10:18 PM
Show answer
Hide answer
Answer:
Hello Aaron,
In short - it depends.
You will need to register a FSS notification in case of import/export with EAC HS (customs) code which is in the article 2.19 of Single list of goods subject to prohibitions or restrictions on import or export by the Customs Union
Example of such EAC HS-codes:
8471 30 000
8471 30 000 0
8471 41 000
8471 49 000 0
8471 50 000 0
8471 70 500 0
8471 70 980 0
8471 80 000 0
8471 90 000 0
8473 30 200 9
If the HS code is not in this list of 2.19 or the PC is crossing the border like a single user’s own needs equipment - then there is a legal exception and the FSS notification is not needed.
Certificate.Net Expert 2/1/2019 12:11:32 PM
Question:
Hello, we have a smartwatch with Wi-Fi and BT function. I guess we should have FSS notification so we can import it into Russia. It has 2 models with different cases (steel and ceramic). All others are same such as PCBA and software etc. May I know the all cost would be if you do it for us? Thank you.
Sam 11/7/2018 6:19:59 PM
Show answer
Hide answer
Answer:
Hello Sam,
Conditions for registration of the FSS notification: Maximum validity unlimited (any you wish). The applicant must be the foreign manufacturer or the authorized representative in Russia. Lead time 8-10 working days, cost USD *. Registration procedure requires to sign in the FSS notification forms in Russian and provide:
  • A legalization form with notarization of the powers of signatories - 2 pcs signed by the notary (in case of foreign applicant).
or
  • A power of attorney for local representative with legalization and notarization of the powers of signatories - 1 piece signed by the notary (in case of local authorized applicant).
Two models with identical encryption functions may be included in one FSS notification. If the manufacturer is registered in USA or Europe then legalization is equal to Apostille. After work starts you will get a FSS notification form prepared by our expert and an example of approved legalization form with notarization. All forms and PoA must be in Russian or must have a notary signed translation in to Russian (so here will be some additional payment for notary translation, text size dependent).
When the registration procedure is done the info about your device (and it’s FSS notification) will appear in the public FSS registry. Russian customs use this registry to check if a FSS notification exists and valid, so every importer can use the notification by its ID. In case you do not have a local representative in Russia to make a notary signed translation - please let me know, we can do it for you. I hope this helps you.
Certificate.Net Expert 11/8/2018 12:53:32 PM
Question:
Hi, We are developing a Bluetooth remote control. This remote control will be packaged with a IT product that will be certified for use in Russia. The remote could also be sold as stand alone. Does this remote control require FSS or can we use the certification of its bundled IT device. The remote control is made by an OEM supplier for us. We are making the IT device.
Mr M 10/3/2018 5:15:57 PM
Show answer
Hide answer
Answer:
Dear Mr M,
Bluetooth standard includes encryption so your product requires a FSS notification to be registered. As the manufacturer of the “IT device” you can choose whether to register a notification for standalone remote control or for IT device or for both. In any case the cost will not differ, USD *. Lead time 8-10 working days. Maximum validity unlimited. The applicant must be the manufacturer or the authorized representative in Russia. Registration procedure requires to sign in a set of application documents in Russian and provide:
  • A notification form prepared by us - 2 pcs in Russian signed by the manufacturer.
  • A legalization form with Apostille and notarization of the powers of signatories - 2 pcs signed by the notary.
      • or
      • A notification form prepared by us - 2 pcs signed by the authorized representative in Russia.
      • A power of attorney for local representative with Apostille and notarization of the powers of signatories - 1 piece signed by the notary.
      Possible additional payments:
      • Payment for Apostille and notarization of the powers of signatories - played to your local notary, country specific.
      • Payment for shipping of documents to our office in Moscow - depends on delivery company and distance.
      • Payment for translation and notarization of all texts in foreign languages - depends on amount of text, usually about USD 20-30.
      In case you do not have a local representative in Russia to make a notary signed translation - please let me know, we can help with this.
      Registered notification will appear in public FSS registry. EAC customs use this registry to check if the notification exists and valid, so you don’t have to provide additional papers.
Certificate.Net Expert 10/4/2018 2:31:22 PM
Question:
I have been told that it is not possible to receive FSB notification for a product which implements SRTP, a protocol commonly used in VoIP telephones and other media conferencing implementations like WebRTC (found in most modern web browsers). Is this accurate? Are the VoIP suppliers of the world really disabling SRTP in the products they ship to Russia?
Jason 6/20/2018 7:32:59 PM
Show answer
Hide answer
Answer:
Hello Jason,
Yes, it’s correct. SRTP uses AES-256 algorithm to encrypt user data. It exceeds the scope of FSS (FSB) notification. The manufacturer should block SRTP in case he wants to receive the FSS notification.
Alternatively such equipment may be imported and used with FSS license. Obtaining of FSS license is much more complicated procedure for strong end-to-end encryption.
The licensed importer should report to FSS about every sale of equipment, the buyer also should have the FSS license.
Yes, many VoIP suppliers disable SRTP in firmware for EAC market. For example Cisco uses NO PAYLOAD ENCRYPTION (NPE) firmwares. But the end user can upgrade or change the firmware. It’s not illicit. So it’s the most convenient way.
Certificate.Net Expert 6/21/2018 2:45:14 PM
Question:
How do I obtain an FSB Certificate for an Uplogix Model 5000 in order to import goods into Russia ? Please advise regards, Phil
Phil Allen 2/14/2018 4:51:56 PM
Show answer
Hide answer
Answer:
Hello Phil,
FSB notification is used mostly for end user equipment with simple encryption, not for enterprise equipment. According to the description Uplogix 5000 cryptography exceeds the requirements of the FSB notification, so notification can’t be registered in a simple way. But you have 3 options to do:
  • Block some additional encryption functions (including SSD AES encryption, VPN and so on) and register FSB notification for another model name (for example Uplogix 5000RU). Validity period unlimited, all documents should be signed by the manufacturer or by the local representative with apostilled PoA.
  • Get FSB licenses to buy/sell advanced cryptography equipment for all Uplogix 5000 users in the Russia. It’s a very complicated way.
  • Get FSB permissions to import for own use for all Uplogix 5000 users (with no right to deliver this equipment and/or services to 3rd parties). Validity period 1 year, all documents should be signed by the importer(s)-owner(s).
We can help you with 1 and 3.
Certificate.Net Expert 2/15/2018 10:53:46 AM
Question:
Hi, We need to get the FSB notification certificate for our hardware wallet product used to store cryptocurrency. Please let me know if you can acquire the certification for us. Regards, Bob, CEO KeepKey
Bob Goodman 1/24/2018 2:18:09 PM
Show answer
Hide answer
Answer:
Hi Bob,
Surely we can register the FSB notification.
Maximum validity unlimited, the applicant must be the manufacturer or the local authorized representative in Russia. Lead time 10 working days, cost USD *. Registration procedure requires to sign in a set of application documents in Russian and provide:
  • A technical characteristics - 2 copies signed by the manufacturer, with Apostille or consular legalization each.
or
  • A technical characteristics - 2 copies signed by the authorized representative;
  • A legalized power of attorney, with Apostille or consular legalization.
All documents in Russian will be prepared by our experts. Also you will get a sample of approved legalized PoA.
Please bear in mind that all documents (and it’s parts) should be notary translated to Russian, including English-language notary acts/seals and Apostille sheet. This requires additional payments to Russian translator and notary.
Do you have a local representative? We will need a technical specification of your product, including a list of encryption functions, protocols and algorithms used.
Certificate.Net Expert 1/26/2018 1:05:44 PM
Question:
If understood correctly: An integrator of any wireless module, which has previously received FSS notification on modular level, does not need own FSS notification, just needs the Notification Number(s) of the module(s) integrated? So if the radio module is registered here: https://portal.eaeunion.org/sites/odata/_layouts/15/Portal.EEC.Registry.Ui/DirectoryForm.aspx?ViewId=859ec98d-f4fe-423a-b6bc-d01b53fd4b7c&ListId=0e3ead06-5475-466a-a340-6f69c01b5687&ItemId=232# No product own FSS registration required? Products affected could be any product in the field of smart home such as fridge, washing machine, LED bulbs with wireless inside - where wirelees component can be W-LAn, Bluetooth , ZigBee. If the modules used in these non typical radio products do alreday have a FSS notification, no own FSS notification is needed? Thanks in advance!
Sandra Gomez 12/1/2017 12:11:37 PM
Show answer
Hide answer
Answer:
Hello Sandra,
If the integrator imports a module which already has a FSS notification then there is no need to receive one more FSS notification. Also there is no need to register FSS notification for the products made inside the EurAzEs with that module inside.
If the integrator imports some other device with that module inside, the product will have another model name and perhaps another manufacturer. In that case the integrator have to receive another FSS notification for concrete model.
Certificate.Net Expert 12/1/2017 1:52:12 PM
Question:
We have a networking hardware device that does TLS and IPsec cryptography. If we go for FSB certification, can our partners and resellers use the same certificate to import into Russia ? Is there a need to provide encryption keys ? Where can we get detailed requirements of what we need to do to comply ?
Anna 11/21/2017 9:23:02 PM
Show answer
Hide answer
Answer:
Hello Anna,
Here is a list of registered FSS notifications
Certificate.Net Expert 11/22/2017 12:56:48 PM
Question:
Hello, I'm looking for advise on the import of a IS-DA-256-8000 DISK ASHUR DT 8TB PORTABLE HARD DISK DRIVE: NO STORED DATA: ENCRYPTED. Do I need a FSS Notification Certificate? Thanks
Stuart Gamester 10/23/2017 6:29:38 PM
Show answer
Hide answer
Answer:
Dear Stuart,
You can use this FSS notification for all DiskAshur models (FSS ID RU0000013789, valid till May 8, 2018). Also you don’t need any notification for your personal devices (in your baggage).
Certificate.Net Expert 10/27/2017 1:45:19 PM
Question:
Hello Sir, I have 2 products. One is a router. It has Wi-Fi function and a LAN port. The other is a Satellite settop box which has Wi-Fi client function and a LAN port. Do they need FSS notification?
Jake 9/15/2017 8:53:58 AM
Show answer
Hide answer
Answer:
Hello Jake,
Wi-Fi standard includes encryption so yes, all Wi-Fi devices require a notification of FSS.
Also routers and set top boxes usually have a web interface with HTTPS. This should be mentioned in the notification too.
Certificate.Net Expert 9/15/2017 5:31:44 PM
Question:
Hello, I would need to encrypt C drive on corporate laptops as this is a part of our company security policy but as Encryption is forbidden in Russia obviously laptops and desk computers are coming without TPM. Would you please be so kind to expalin what are the possiblities ? Thank you! Nataly
Natly 8/3/2017 10:45:13 PM
Show answer
Hide answer
Answer:
Hello Nataly,
In Russia encryption is not forbidden, you just need to declare the encryption functions of the TPM (notify the FSS).
C drive (HDD, SSD) could be encrypted without TPM (FDE technology on ThinkPad or BitLocker in MS Windows).
Certificate.Net Expert 8/7/2017 4:07:33 PM
Question:
Hey, We are an integrator. We purchase cellular routers from a manufacturer in Europe. They send the units to the United States, where we configure them and send them to our client in Russia. We are being told the FSS Notification is needed in order to ship this way. Do we have to have the cellular router vendor file for this notification? I would think that we, the integrator, or our client in Russia would be considered the authorized representative. We have the EAC certificate for the device, from the manufacturer, is anything else needed? How long would the process take to get this done?
Tom 6/20/2017 5:56:08 PM
Show answer
Hide answer
Answer:
Hi Tom,
Yes, you have to register a FSS notification for customs clearance (if it is not registered already). Maximum validity unlimited, the applicant must be the manufacturer or the local authorized representative (in Russia). Lead time 5-7 working days days, cost USD 300 for one model name, no extra tax. Registration procedure requires to sign in a set of application documents (in Russian) and provide:
  • A technical characteristics - signed by the manufacturer or an authorized representative.
  • A legalized power of attorney (with Apostille or consular legalization, in case of signing by local representative).
  • All documents in Russian will be prepared by our experts. Also you will get a sample of approved legalized PoA.
Also wireless routers require EAC license. Maximum validity 1 year, the applicant must be the importer in Russia. Lead time 5-7 days, cost USD 250 + tax USD 130 per HS code. Registration procedure requires to sign a set of application documents and to provide:
  • A copy of trading contract - signed by the applicant.
  • A copy of EAC certificate - signed by the applicant.
  • A copy of FSS notification - signed by the applicant.
  • A copy of RFC certificate - signed by the applicant.
RFC certificate of conformity for radiofrequency compatibility. Maximum validity unlimited, the applicant must be the authorized representative in Russia. Lead time 2-6 weeks (by applicant’s choice), cost depends on: desired lead time, shorter time requires the bigger testing cost; device characteristics (max RF power, RF frequency, number of RF bands). Certification procedure requires to sign a set of application documents and provide:
  • A copy of the Unified State Register of Legal Entities form - signed by the applicant.
  • A copy of the order of appointment to the post of applicant’s director - signed by the applicant.
  • A product sample for testing.
Certificate.Net Expert 6/20/2017 5:25:15 PM
Question:
Hi, We are an authorised distributor for a US based mobile phone manufacturer, we sent some samples to a client of ours in Russia which where sent back saying we need FSS clearance. Do we need to obtain this license or the receiver and if it is us how do we do this? Regards,
Zamir 6/15/2017 2:12:59 PM
Show answer
Hide answer
Answer:
Hi Zamir,
Yes, mobile phones require a cryptography notification to be registered in FSS for customs clearance.
Maximum validity unlimited, the applicant must be the manufacturer or the authorized representative (in Russia).
Lead time 5 days, cost USD 350 for one model name, no extra tax.
Registration procedure requires to sign in a set of application documents (in Russian) and provide:
- A technical characteristics - signed by the manufacturer or an authorized representative.
- A legalized power of attorney (with Apostille or consular legalization, in case of signing by local representative).
All documents in Russian will be prepared by our experts. Also you will get a sample of approved legalized PoA.
Certificate.Net Expert 6/15/2017 3:01:22 PM
Question:
Hi, I have two products and i need to know if they both require a FSB notification. One is the ACS-5048-001(avocent console server)-ECCN = 5a992. The other is a cisco nexus swtich-Eccn = 5a002. Can you tell me they both need an fsb notification and can you provide one? Thanks Keith
Keith Daly 3/25/2017 12:02:55 PM
Show answer
Hide answer
Answer:
Hi Keith,
Yes, both products require a FSB notification to be registered. And yes, we can provide a service to get FSB notifications. However, there is a list of already registered FSB notifications, pleaseREFer to it and check does it contains the needed model. If yes - then you can use it.
Certificate.Net Expert 3/27/2017 2:51:02 PM
Question:
Hello I am a logistics manager for a company that makes display and security equipment for retail electronic goods. We are being told that we need FSS notification certificate for some of our products. Can you please urgently refer to a company that can help us obtain this? Thank You1
Bob Henry 1/26/2017 7:02:42 PM
Show answer
Hide answer
Answer:
Hello Bob,
Our company can help you with FSS notification and all other types of documents needed for customs clearance in Eurasian Economic Union and Russia. Send us a technical description of the equipment please.
Certificate.Net Expert 1/27/2017 9:04:35 AM
Question:
I am looking for help and Guidance relating to our ELDS industrial gas detectors. We believe we need a FSS certificate, how do we process our application?
Steve Carpenter 11/17/2016 5:44:14 PM
Show answer
Hide answer
Answer:
Hello Steve,
Equipment with Bluetooth/Wi-Fi or SSL/TLS remote management requires FSS notification.
Maximum validity unlimited, the applicant must be the manufacturer or the authorized representative in Russia.
Lead time 5 days, no extra tax.
Registration procedure requires to sign a set of application documents and provide:
- A technical characteristics in Russian with Apostille or consular legalization - signed by the manufacturer or an local authorized representative.
- A power of attorney with Russian translation & Apostille or consular legalization - in case of local authorized representative.
Technical characteristics & PoA samples are provided by our experts.
Certificate.Net Expert 11/18/2016 10:03:45 AM