Is MTCTE mandatory? MTCTE for routers and NCCS ComSec explained
Yes, MTCTE for routers is mandatory in India: a router, IoT gateway or other notified telecom equipment cannot be sold, imported or used in India without a valid MTCTE certificate from TEC. Routers and IoT gateways were notified under MTCTE Phases III and IV in September 2021, and certification became mandatory after TEC extended the dates several times. IP routers and Wi-Fi CPE also need NCCS security certification (ComSec) against ITSAR, mandatory since 1 July 2024 for new products and against ITSAR v2.0 since 1 April 2026.
Key facts
| What MTCTE is | Mandatory Testing and Certification of Telecom Equipment, run by TEC under DoT |
| Legal basis today | Telecommunications (Framework to Notify Standards, Conformity Assessment and Certification) Rules, 2025, which replaced the 2017 Indian Telegraph (Amendment) Rules framework |
| Routers and IoT gateways | "IoT Gateway" listed in Phase III and "Router" in Phase IV (TEC notification of 22 September 2021) |
| Security certification | NCCS ComSec for IP routers and Wi-Fi CPE: mandatory from 1 July 2024 (new products) and 1 October 2024 (products already TEC-certified) |
| Current security standard | ITSAR for IP Router v2.0.0, effective 1 December 2025, mandatory from 1 April 2026 |
| Pro Tem certificates | Validity raised from 6 months to 2 years (PIB, 5 December 2025) |
| Latest phase | Phase VI, notified 25 February 2025, mandatory from 24 August 2025 |
| Nexapp | TEC MTCTE certificate 244903206 (IoT Gateway), valid to 23 March 2035, covers nine Instaroute models |
Short answer: who needs MTCTE, and when
MTCTE applies to the product, not the buyer. The OEM, importer or dealer gets the certificate before the product is sold or used in India. Since May 2025, the scheme runs under the Telecommunications (Framework to Notify Standards, Conformity Assessment and Certification) Rules, 2025, made under the Telecommunications Act 2023 (PIB). Under these rules, notified equipment cannot be sold, deployed in a network or otherwise used in India unless it has a valid certificate (Lexplosion summary).
For a router buyer this means three checks:
- The router model has an MTCTE certificate in the OEM's or importer's name.
- The certificate covers the right essential requirement (ER) for the product, such as Router, IoT Gateway or Cellular CPE.
- If the product is an IP router or Wi-Fi CPE, it also has NCCS security certification, or a valid Pro Tem certificate.
MTCTE phases that matter for routers
TEC brought equipment into MTCTE in phases. Each phase lists products by ER. Each phase first opened applications on the MTCTE portal and made certification mandatory later.
| Phase | Relevant products | Key dates |
|---|---|---|
| Phase III | IoT Gateway; Smart/CCTV camera; tracking device; equipment in the 2.4 GHz and 5 GHz bands | Notified 22 Sept 2021; applications from 11 Oct 2021; mandatory date first set at 1 July 2022 (TEC) |
| Phase IV | Router; LAN switch; IP security equipment; Point of Sale devices | Same notification; mandatory dates for remaining ER parameters first set at 1 July 2022 (TEC) |
| Phase III and IV extensions | IoT Gateway, Router and 30 other products | Moved from 1 Oct 2023 to 1 Jan 2024 by TEC's notice of 9 Nov 2023 (Certification India); TEC lists a further move for some Phase III/IV items to 1 April 2024 (TEC MTCTE page) |
| Phase VI | Cellular CPE; network security management and analytics equipment; content security; DDoS protection; malware analysis; web application firewall; NGSO terminals and gateways | Notified 25 Feb 2025; mandatory from 24 Aug 2025 (TÜV SÜD; Aleph India) |
As of September 2026, the Phase III, IV and VI deadlines have passed. If a router or gateway you are buying falls in one of these ERs, it should already hold a certificate.
A practical point: an industrial 4G router, a branch SD-WAN edge and a home Wi-Fi router may be certified under different ERs. Match the ER on the certificate to what the product does in your network.
NCCS ComSec: the security layer on top of MTCTE
MTCTE tests conformance with TEC's technical, EMI/EMC and safety requirements. Security testing sits with the National Centre for Communication Security (NCCS) under the Communication Security Certification (ComSec) scheme. NCCS tests products against the Indian Telecom Security Assurance Requirements (ITSAR) for each product type.
For IP routers and Wi-Fi CPE, ComSec became mandatory in 2024:
- New products (not yet TEC-certified): security certification mandatory from 1 July 2024 (Aleph India).
- Products already TEC-certified: mandatory from 1 October 2024 (PIB).
- Pro Tem certificates: NCCS's notification of 2 October 2024 let OEMs apply until 31 October 2024 with a self-declaration of ITSAR conformance and an undertaking to withdraw failing products. In return, NCCS issued a Pro Tem certificate so supply could continue during testing (NCCS notification).
- Two-year Pro Tem validity: on 5 December 2025, DoT raised Pro Tem validity from 6 months to 2 years. By then NCCS had issued 102 Pro Tem certificates (PIB).
ITSAR v2.0 for IP routers
NCCS released ITSAR for IP Router version 2.0.0 (ITSAR201012512) on 1 December 2025. It replaces the 2018 and 2024 versions and covers edge, core, access, aggregation and MPLS routers, including SDN, VNF and CNF deployments (Aleph India). Certification against v2.0 became mandatory from 1 April 2026 (CAICT GMA).
NCCS has also granted a separate exemption for cloud-implemented IP routers and Wi-Fi CPE. An NCCS letter of 13 August 2026 extended it from 31 August 2026 to 31 December 2026 (C-PRAV). This applies to cloud-implemented products, not to ordinary hardware routers. Read the NCCS letter before relying on it.
MTCTE vs ComSec vs trusted source
Tenders often mix these three terms. They are different things.
| MTCTE (TEC) | ComSec (NCCS) | Trusted source (NSDTS) | |
|---|---|---|---|
| What it covers | Technical, EMI/EMC and safety conformance per ER | Security testing against ITSAR | Whether a vendor and product may be connected to a licensed telecom network |
| Applies to | Notified telecom equipment sold or used in India | IP routers, Wi-Fi CPE and other products DoT has notified for security certification | Equipment that telecom licensees connect to their networks |
| Who holds it | OEM, importer or dealer, per model | OEM, importer or dealer, per model | Vendor and product, designated by the National Cyber Security Coordinator |
| Where to check | MTCTE portal | MTCTE portal (integrated certificate) and NCCS | Trusted Telecom Portal |
| Mandatory since | Per phase (Phase III/IV routers and gateways: by 2024) | 1 July 2024 / 1 October 2024 for IP routers and Wi-Fi CPE | 15 June 2021 for telecom licensees |
Trusted source rules come from the National Security Directive on Telecommunication Sector. From 15 June 2021, telecom licensees may connect only trusted products to their networks, and need permission to expand networks with other equipment (Tele.net). This binds telecom operators. It does not bind an enterprise buying routers for its own branches, unless the operator or tender asks for it.
How to check an MTCTE certificate
- Ask for the certificate number for each model you are buying. Ask for the number itself, not a logo on a datasheet.
- Look it up on the MTCTE portal. Check the holder's name, the ER, the model names and the validity date. TEC now issues regular certificates with 10-year validity (TEC).
- Match model names exactly. A variant with a different radio, SIM count or Wi-Fi module may not be on the certificate.
- Check the security certificate for IP routers and Wi-Fi CPE. If it is a Pro Tem certificate, note its expiry date.
- Put it in the contract. Ask the supplier to keep certificates valid for the supply period, and to tell you if a model is withdrawn.
Buyer checklist for router tenders
| Check | Why it matters |
|---|---|
| MTCTE certificate number per model | Uncertified notified equipment cannot be sold or used in India |
| ER on the certificate matches the product's function | A Router, IoT Gateway and Cellular CPE are different ERs |
| NCCS ComSec or Pro Tem certificate for IP routers and Wi-Fi CPE | Mandatory since 2024; ITSAR v2.0 since 1 April 2026 |
| Validity date covers your supply period | Avoid a lapse mid-rollout |
| Trusted source status, if a telecom licensee will connect the gear | Required by NSDTS for licensee networks |
| Local content declaration, for public procurement | Separate from MTCTE; see our Class-I local supplier guide |
Do not assume that foreign vendors lack MTCTE, or that Indian vendors have it. Many global and Indian OEMs hold certificates. Check each model.
Where Nexapp stands
Nexapp holds TEC MTCTE certificate 244903206, issued 24 March 2025 and valid to 23 March 2035, under the IoT Gateway essential requirement. It covers these Instaroute routers:
- IR11004GS and IR11004GSW
- IR11004GD and IR11004GDW
- IR1180DM and IR1190DMG
- IR1105-ODU-4G
- IRX100-5G and IRX1160-ODU-5G
The certificate does not cover the IRX100-5Gv2 or the Enterprise X Series edges. It is an IoT Gateway certificate, not a Wi-Fi CPE certificate. You can check it on the public MTCTE portal. Details are on our Trust page, and tender teams can find the full document list on the government and PSU page.
Sources
- TEC notification No. 5-2/2021-TC/TEC/93, 22 September 2021 (Phases III and IV)
- NCCS notification, 2 October 2024 (IP Router and Wi-Fi CPE security certification)
- PIB, "DoT extends the validity of Pro Tem certificate", 5 December 2025
- TEC MTCTE page and MTCTE portal
- Aleph India, TÜV SÜD, C-PRAV and Certification India summaries of TEC and NCCS notifications
- Tele.net on the Trusted Telecom Portal (June 2021)
Frequently asked questions
Is MTCTE mandatory for routers in India?
Yes. "Router" was notified in MTCTE Phase IV and "IoT Gateway" in Phase III (TEC, 22 September 2021).
After TEC extended the dates, certification became mandatory by 2024. Notified equipment cannot be sold, imported or used in India without a valid certificate.
What is the difference between TEC certification and NCCS ComSec?
TEC's MTCTE certificate covers technical, EMI/EMC and safety requirements.
NCCS ComSec covers security testing against ITSAR. IP routers and Wi-Fi CPE need both: ComSec became mandatory from 1 July 2024 for new products and 1 October 2024 for products already TEC-certified.
What is a Pro Tem certificate?
It is a provisional NCCS security certificate.
The OEM declares ITSAR conformance and submits the product for testing, and the product stays on sale while testing runs. Since 5 December 2025, new Pro Tem certificates are valid for two years instead of six months.
Which MTCTE phase is the latest?
Phase VI, notified on 25 February 2025 and mandatory from 24 August 2025.
It covers cellular CPE, several network security products (such as DDoS protection and web application firewalls) and NGSO satellite terminals.
Does an enterprise buyer need MTCTE, or only the vendor?
The OEM, importer or dealer obtains the certificate.
The buyer should still check it, because the rules also bar using uncertified notified equipment in India. Put certificate numbers and validity in your tender and contract.
Is trusted source the same as MTCTE?
No. Trusted source is a vendor and product designation under the National Security Directive on Telecommunication Sector.
It binds telecom licensees, who since 15 June 2021 may connect only trusted products. MTCTE is product certification that applies to all notified equipment.
Which Nexapp routers hold MTCTE certification?
Certificate 244903206, valid to March 2035, covers the Instaroute IR11004GS, IR11004GSW, IR11004GD, IR11004GDW, IR1180DM, IR1190DMG, IR1105-ODU-4G, IRX100-5G and IRX1160-ODU-5G.
It does not cover the IRX100-5Gv2 or the Enterprise X Series.
Checking certificates for a router tender? Get the certificate pack and model-wise details.
24×7 NOC in Pune · 75,000+ devices deployed · 400+ enterprise and banking customers since 2014.