FDO Certification Program
The FIDO Device Onboard (FDO) Certification Program is a product certification program intended to certify edge and IoT device onboarding implementations of FDO. These connected devices are components defined in the FDO specification, certification requirements, and policy documentation.
FDO Certification is intended to certify, evaluate, and validate functional and security characteristics, or functional-only characteristics, depending on the component, enabling edge node and IoT device vendors to prove that their solutions adhere to the security and interoperability requirements of the FDO specifications and requirements. Achieving certification allows vendors to demonstrate their products are high quality and at low risk of cyber-threats, while deploying companies can ensure devices will interoperate seamlessly and securely within IoT and distributed computing infrastructures.
Assessment of the functional characteristics is achieved by successfully completing Functional Certification, and similarly, security characteristics are assessed by successfully completing FIDO Security Certification.
The program is open to FIDO Members and non-members alike, although FIDO Alliance Members will receive discounts on certification fees and be exposed to added co-marketing opportunities.
Certifiable Implementations of FDO include:
- Device Onboarding (DO) Services: a component of the device Management Service and connected device platform, rather than a separate network service, constructed to perform FIDO Device Onboard protocols on behalf of the Owner.
- Devices: are manufactured devices enabled with FDO and ready for provisioning, also known as ‘End Products,’ like PCs, gateways, security cameras, etc. [Subsequent reference and naming might also include “FDO-Enabled Devices”, having the same meaning as “Devices”.]
- Rendezvous Servers (RV): a server configured to connect and register a Device implementing FDO with an Owner.
FDO Functional Certification is required for all certifiable implementations: Device Onboarding (DO) Services, Devices, and Rendezvous Servers (RV). Security Certification is required for Device Onboarding Services and Devices meeting the FDO Security and Privacy requirements.
Successful certification allows products to be recognized as FIDO Certified products, allowing usage of the associated logo.
Supported Specification Versions
FDO Certification is currently available for three implementation classes:
- Device Onboarding Services (DO)
- Devices (FDO-Enabled Devices, i.e., End Products)
- Rendezvous Servers implemented against FIDO Device Onboard (FDO) version 1.1.
When a new FDO Specification version is approved as a Proposed Standard, and test tools are available for the new version, any implementations applying for FIDO Certification may implement the new version. A new version refers to a version within the same specification family, for example, FDO v1.1 upgrading to FDO v2.0.
A specification version is considered Available for Certification (Certification Availability Date) when the first Interoperability Event can be held for the new version. For a valid, official interoperability test, there must be two of each implementation class, where each of the two implementations in each class must be from a different implementer company.
Certification Policies and Requirements
The FIDO Certification Team administers the governance of the FDO Certification Program, including operationalizing and adhering to the guidelines that are enclosed in the certification policy and requirements documentation. Although the Certification Process Overview page outlines the steps for certification, reference the FDO Certification Policy and Requirements documentation for complete program details.
Like supported specification versions, FDO Requirements and Certification Policies are versioned based on program updates, and a Sunset Date begins when the availability of a new policy or requirement version becomes Available for Certification (Certification Availability Date).
Requirements, certification policies, and other administrative documents are available on the Resource Documentation program page. The FIDO Alliance is the certification entity for all approvals related to FIDO Certification Programs.
