РусскийEnglish中文

Russian FSS notification (Federal Security Service notification)

is the notice obligatory for the registration of programs or hardware devices used for enciphering and as a means of cryptography according to the section 2.19 of the Uniform inventory, to which a ban or restrictions on import or export by member states of the Customs Union within the Eurasian Economic Community in trade with the third countries are applied. The FSS notification is necessary for various computers and computing equipment with encryption functions (cryptography):
  • Printers, copiers & electronic modules;
  • Pocket machines & mobile phones;
  • Cash registers;
  • Servers & portable computers;
  • Electronic modules & parts;
  • Electronic integrated circuits & memory devices;
  • Software encryption (cryptographic) means.

The Federal Security Service notification is also necessary for wired and wireless means of communication with encryption functions:
  • User communication devices;
  • Base stations & access points;
  • Telecommunications equipment & parts;
  • Radio-broadcasting or television equipment;
  • Radionavigation receivers & remote control equipment;
  • Equipment for access to the Internet & television receivers with a communication function.



In some cases, FSS notification is not obligatory; such cases belong to exceptions of the general order. Cases of the import of computer facilities in which all cryptographic functions are realized by a program, without preset software, belong to these exceptions. Federal Security Service notification in this case shall be executed on the cryptographic software.

In addition, FSS notification is not necessary for means of communication with transparent encoding of information that does not require knowledge of the secret key to decode it. It is also not necessary to register a new notification for goods that have previously been registered for Federal Security Service notification - for the legal import of such goods, it is enough to specify information about the previously registered FSS notification.

Document title:Russian FSS notification
Maximum validity:no limits
Document is required for:customs clearance, realization
Document is issued to:manufacturer or authorized entity
Tax:no
Lead time:10 working days
Price:USD 200


The provisions of international agreements take precedence over the relevant Russian laws and regulations do not supersede national legislation in this area. Therefore, the Federal Security Service notification is usually not the only necessary permit. According to international or national legislation, the Russian EAC certificate, the Russian CCC certificate, the Russian RFC certificate or a Russian EAC license can be demanded in addition.



Получить Российский Нотификация ФСБ   得到俄罗斯 FSS通知
Average rating: 5 Best rating: 5 Rating count: 6
Ask a question or make a comment
Name:     Email:
Question:
Hello - we are looking to ship 20 Microsoft Surface Pro 4 tablets to clinical sites in Russia but the FSB is expiring at the end of the month. How do we get that extended?
Lindsey 12/16/2019 9:48:54 PM
Answer:
Dear Lindsey,
You can prolong the FSB notification only if you have a PoA from the manufacturer (Microsoft). AFAIK the ending of the notification is coherent with the life cycle for this product
Certificate.Net Expert 12/17/2019 3:45:12 PM
Question:
Dear Sir or madam, Is standard WPA/WPA II encryption used for WiFi modules subject to FSS notification? Kind regards, Sebastian
Sebastian Antoni 12/5/2019 10:08:24 AM
Answer:
Dear Sebastian,
Sure, Wi-Fi WPA is a wireless encryption standard, so it requires the FSS notification to be registered. Individuals may import Wi-Fi devices as a personal items without any restrictions.
Certificate.Net Expert 12/5/2019 12:49:40 PM
Question:
Hello, we are an Industry PC manufacturing company. We produce products in Taiwan and going to sell to Russia. One of our clients is concern about the product which content the wifi-module inside the PC. Could I know does this product will be consider the encryption product and need to apply any additional certificates? Or it will only depends on the which HS-code I applied. Thank you in advance.
Paula 9/19/2019 5:58:36 AM
Answer:
Hello Paula,
Usually PCs need FSS notification to be registered because of Wi-Fi or installed software encryption. The HS customs code will be applied by the Russian customs independently, so we can’t guess it now. It’s likely that this HS code will be from the section 2.19 of the “Single list of goods subject to prohibitions or restrictions on import or export by the Customs Union member states within the EurAsEC”.
Certificate.Net Expert 9/19/2019 3:31:36 PM
Question:
Hello, We are an IT Distributor company based in USA and selling 32Gb Fibre Channel HBAs to Russia. We have a freight forwarder in place but no one sure which paperwork needed for the customs to get this shipped smoothly. Would you be able to advise? Thanks so much, Natalia
Natalia 3/20/2019 6:25:48 PM
Answer:
Hello Natalia,
The paperwork for any product depends on EAC HS-code. Usually HBAs do not need any additional certificates or permissions for customs clearance. Because they are safe (very low voltage), have no encryption, have no radiofrequency devices.
Certificate.Net Expert 3/21/2019 10:04:03 AM
Question:
Hello, we're a french digital signage integrator. We assemble in France mini-PC (buyed from China through resellers/distributors) with a Windows 7 Embedded or Windows 10 IoT license + a digital signage software player (from a French company). All of these includes crytographic features (TPM, TLS certificate, ...) but not necessarily used. As we currently deploy digital screens + players (PC described above) for an international customer that have some sites in Russia, we would like to know if an EAC certificate is needed to pass customs. Can we claim any certificates from the manufacturer and those from the publishers (operating system and digital signage software)?
Sylvain 2/25/2019 8:39:15 PM
Answer:
Hello Sylvain,
Any electrical equipment with power source above 75V DC or above 50V AC needs a EAC certificate or declaration of conformity. PCs with remote wireless administration should have the EAC certificate too. For encryption devices you should have a registered FSS notification. If your product is labeled by your company - then it’s a new product with new manufacturer. So you can’t use any certificates from other manufacturers.
Certificate.Net Expert 2/1/2019 12:11:32 PM
Question:
Hello, we have Cash Desks. This is only a small PC with Windows and our POS Software installed. There are no TPM or any other encryption Software. Do we need a Notication here? Aaron
Aaron 1/31/2019 4:10:18 PM
Answer:
Hello Aaron,
In short - it depends.
You will need to register a FSS notification in case of import/export with EAC HS (customs) code which is in the article 2.19 of Single list of goods subject to prohibitions or restrictions on import or export by the Customs Union
Example of such EAC HS-codes:
8471 30 000
8471 30 000 0
8471 41 000
8471 49 000 0
8471 50 000 0
8471 70 500 0
8471 70 980 0
8471 80 000 0
8471 90 000 0
8473 30 200 9
If the HS code is not in this list of 2.19 or the PC is crossing the border like a single user’s own needs equipment - then there is a legal exception and the FSS notification is not needed.
Certificate.Net Expert 2/1/2019 12:11:32 PM
Question:
Hello, we have a smartwatch with Wi-Fi and BT function. I guess we should have FSS notification so we can import it into Russia. It has 2 models with different cases (steel and ceramic). All others are same such as PCBA and software etc. May I know the all cost would be if you do it for us? Thank you.
Sam 11/7/2018 6:19:59 PM
Answer:
Hello Sam,
Conditions for registration of the FSS notification: Maximum validity unlimited (any you wish). The applicant must be the foreign manufacturer or the authorized representative in Russia. Lead time 8-10 working days, cost USD *. Registration procedure requires to sign in the FSS notification forms in Russian and provide:
  • A legalization form with notarization of the powers of signatories - 2 pcs signed by the notary (in case of foreign applicant).
or
  • A power of attorney for local representative with legalization and notarization of the powers of signatories - 1 piece signed by the notary (in case of local authorized applicant).
Two models with identical encryption functions may be included in one FSS notification. If the manufacturer is registered in USA or Europe then legalization is equal to Apostille. After work starts you will get a FSS notification form prepared by our expert and an example of approved legalization form with notarization. All forms and PoA must be in Russian or must have a notary signed translation in to Russian (so here will be some additional payment for notary translation, text size dependent).
When the registration procedure is done the info about your device (and it’s FSS notification) will appear in the public FSS registry. Russian customs use this registry to check if a FSS notification exists and valid, so every importer can use the notification by its ID. In case you do not have a local representative in Russia to make a notary signed translation - please let me know, we can do it for you. I hope this helps you.
Certificate.Net Expert 11/8/2018 12:53:32 PM
Question:
Hi, We are developing a Bluetooth remote control. This remote control will be packaged with a IT product that will be certified for use in Russia. The remote could also be sold as stand alone. Does this remote control require FSS or can we use the certification of its bundled IT device. The remote control is made by an OEM supplier for us. We are making the IT device.
Mr M 10/3/2018 5:15:57 PM
Answer:
Dear Mr M,
Bluetooth standard includes encryption so your product requires a FSS notification to be registered. As the manufacturer of the “IT device” you can choose whether to register a notification for standalone remote control or for IT device or for both. In any case the cost will not differ, USD *. Lead time 8-10 working days. Maximum validity unlimited. The applicant must be the manufacturer or the authorized representative in Russia. Registration procedure requires to sign in a set of application documents in Russian and provide:
  • A notification form prepared by us - 2 pcs in Russian signed by the manufacturer.
  • A legalization form with Apostille and notarization of the powers of signatories - 2 pcs signed by the notary.
    • or
      • A notification form prepared by us - 2 pcs signed by the authorized representative in Russia.
      • A power of attorney for local representative with Apostille and notarization of the powers of signatories - 1 piece signed by the notary.
      Possible additional payments:
      • Payment for Apostille and notarization of the powers of signatories - played to your local notary, country specific.
      • Payment for shipping of documents to our office in Moscow - depends on delivery company and distance.
      • Payment for translation and notarization of all texts in foreign languages - depends on amount of text, usually about USD 20-30.
      In case you do not have a local representative in Russia to make a notary signed translation - please let me know, we can help with this.
      Registered notification will appear in public FSS registry. EAC customs use this registry to check if the notification exists and valid, so you don’t have to provide additional papers.
Certificate.Net Expert 10/4/2018 2:31:22 PM
Question:
I have been told that it is not possible to receive FSB notification for a product which implements SRTP, a protocol commonly used in VoIP telephones and other media conferencing implementations like WebRTC (found in most modern web browsers). Is this accurate? Are the VoIP suppliers of the world really disabling SRTP in the products they ship to Russia?
Jason 6/20/2018 7:32:59 PM
Answer:
Hello Jason,
Yes, it’s correct. SRTP uses AES-256 algorithm to encrypt user data. It exceeds the scope of FSS (FSB) notification. The manufacturer should block SRTP in case he wants to receive the FSS notification.
Alternatively such equipment may be imported and used with FSS license. Obtaining of FSS license is much more complicated procedure for strong end-to-end encryption.
The licensed importer should report to FSS about every sale of equipment, the buyer also should have the FSS license.
Yes, many VoIP suppliers disable SRTP in firmware for EAC market. For example Cisco uses NO PAYLOAD ENCRYPTION