MP209 Lifetime CPA Certificates

The National Cyber Security Centre (NCSC) issues Commercial Product Assurance (CPA) Certificates to certain Devices. This enables them to be placed on the Central Products List (CPL) to be used on the Data Communications Company (DCC) network. Currently, the Certificates have an expiry date, and a new Certificate must be sought prior to the expiry should the Manufacturer wish to keep using the Devices. The expiry date of the first CPA certified Devices is 30 August 2022. To manage the re-certification process, the NCSC aims to bring in new Lifetime CPA Certificates without an expiry date. These would have a renewal date instead. The SEC currently does not have any concept of Lifetime CPA Certificates, and only references expiry dates.

The solution is to enable these new Lifetime CPA Certificates that will not expire but will need to be renewed, to be accommodated by the SEC. Certain parts of the SEC will need to reference 'renewal' as well as 'expiry'.

Large Suppliers
Small Suppliers
DCC
Other SEC Parties

Section F ‘Smart Metering System Requirements’
Appendix Z ‘CPL Requirements Document’