This page is intended to help Authenticator Vendors understand the required pieces of Authenticator Certification and different FIDO Certification scenarios. Such scenarios can be applicable during an authenticator’s initial certification, known as a base Certification, and when planning for and budgeting certification fees for multiple models or versions of a product line. They should also be considered for certification maintenance and changes that could occur during a Certified product’s lifetime.
Certification Scenarios
| # | Authenticator | Conformance Testing (Functional) | Interoperability Testing (Functional) | Security Evaluation (Security Certification) | FIDO Certification Fees |
|---|---|---|---|---|---|
| 1 | New Authenticator that wants L1 Certification | Required | Required | Required – Security Secretariat | Functional + L1 |
| 2 | FIDO Certified L1 Authenticator that wants a Derivative Certification (new model/version, evaluated security is not impacted, deriving from and at the time of certifying the base product, and resulting from the removal of an optional feature or change to profile) | Required | Required | Required – Security Secretariat | Derivative |
| 3 | FIDO Certified Authenticator that wants a Derivative Certification (existing model/version, deriving from a base certification and resulting from an administrative change, i.e., change to company or implementation name) | Not Required | Not Required | Not Required | Derivative |
| 4 | FIDO Certified L1 Authenticator that wants a Derivative Certification (sold/licensed white-labeled product, deriving from a base certification, and resulting as a new authenticator) | Required | Required | Required – Security Secretariat | Derivative |
| 5 | FIDO Certified L1 Authenticator that wants a Delta Certification (new model/version, resulting from MINOR change(s) to the evaluated security) | Optional | Optional | Required – Security Secretariat | Delta |
| 6 | FIDO Certified L1 Authenticator that requires Recertification (resulting from MAJOR change(s) to the evaluated security) | Required | Required | Required – Security Secretariat | Functional + L1 |
| 7 | FIDO Certified L1 Authenticator that wants to upgrade to L1+ or greater Security Certification | Optional | Optional | Required – Accredited Security Lab | Functional + L1+ or Greater |
| 8 | New Authenticator that wants L1+ or greater Certification | Required | Required | Required – Accredited Security Lab | Functional + L1+ or Greater |
| 9 | E.g., New Authenticator that wants L2 Certification | Required | Required | Required – Accredited Security Lab | Functional + L2 |
| 10 | FIDO Certified L1+ or greater that wants a Derivative Certification (new model/version, evaluated security is not impacted, deriving from and at the time of certifying the base product, and resulting from the removal of an optional feature or change to profile) | Required | Required | Required – Accredited Security Lab | Derivative |
| 11 | FIDO Certified L1+ or greater that wants a Derivative Certification (sold/licensed white-labeled product, deriving from a base certification, and resulting as a new authenticator) | Required | Required | Required – Accredited Security Lab | Functional + Derivative |
| 12 | FIDO Certified L1+ or greater that wants a Delta Certification (new model/version, resulting from MINOR change(s) to the evaluated security) | Optional | Optional | Required – Accredited Security Lab | Delta |
| 13 | E.g., FIDO Certified L2 Authenticator that wants a Delta Certification (new model/version, resulting from MINOR change(s) to the evaluated security) | Optional | Optional | Required – Accredited Security Lab | Delta |
| 14 | FIDO Certified L1+ or greater Authenticator that requires Recertification (resulting from MAJOR change(s) to the evaluated security) | Required | Required | Required – Accredited Security Lab | Functional + L1+ or Greater |
| 15 | FIDO Certified Authenticator that wants L1 Certification | Required (L1 Conformance Requirements) | Required (L1 Interoperability Requirements) | Required – Security Secretariat | Functional + L1 |
