Critical product
Hardware devices with security boxes
Examples:
Physical payment terminals, hardware security modules, matching tachographs
Conformity path:
European cybersecurity certification can be made mandatory (Art. 8)
Principle of core functionality (Art. 7 CRA)
The core function of the product category is decisive. Implementing Regulation (EU) 2025/2392 specifies technical descriptions; integrating a component alone does not replace assessing the core function of the overall product.