®

Federal Office

 

 

for Information Security {>} — DE ;
a
Common Criteria ae
CYBERSECURITY CERTIFICATION | 2/44 0003 0002

 

 

 

 

 

 

EUCC-3087-2026-03-0002(*)
Administration ID BSI-DSZ-CC-1000-V3-2026

Smart Meter Gateway
Secure Smart Grid Hub (SGH-S), Version 2.00
Holder of the Certificate:  EFR GmbH

 

Nymphenburger Straße 20b
80335 München

Evaluation Facility: SRC Security Research & Consulting GmbH NL .
Emil-Nolde-Straße 7 Common Criteria
53113 Bonn Recognition Arrangement >

recognition for components up

Deutschland and ALC_FLR only

Assurance Level: EUCC High with component AVA_VAN.S

Assurance Package: EAL 4

Augmentation: AVA_VAN.5 and ALC_FLR.2

PP Conformance: Protection Profile for the Gateway of a Smart ( DAKkS
Metering System, Version 1.3, 31 March Akkreditierungsstelle
2014, BSI-CC-PP-0073-2014 DzeB6150100

valid until: 19 March 2034

The ICT Product identified in this certificate and its attached certification report
has been evaluated at the above mentioned notified evaluation facility using the
Common Methodology for IT Security Evaluation (CEM) in application of
relevant state-of-the-art documents for the AVA_VAN components 4 and 5 as
well as application notes and interpretations on advice by the Certification Body
in the versions published at the time the conformity assessment was carried out.
The CC and CEM used for the evaluation of the above mentioned ICT product
are published as ISO/IEC 15408 and ISO/IEC 18045 or as CC v3.1 and cc
v3.1.

(*) This certificate applies only to the specific version and release of the ICT
product in its evaluated configuration and in conjunction with the complete
Certification Report and Notification. For details see Certification Report part A
chapter 5.

The evaluation has been conducted in accordance with the provisions of
Commission Implementing Regulation (EU) 2024/482 of 31 January 2024 laying
down rules for the application of Regulation (EU) 2019/881 of the European
Parliament and of the Council as regards the adoption of the European
Common Criteria-based cybersecurity certification scheme (EUCC) and the
conclusions of the evaluation facility in the evaluation technical report are
consistent with the evidence adduced.

Bonn, 20 March 2026
For the Federal Office for Information Security
ity

     

©
Q.
»
3
3
©
£
a
©
a
2

Bundesamt für Sicherheit in der Informationstechnik
Godesberger Allee 87 - D-53175 Bonn - Postfach 20 03 63 - D-53133 Bonn
Phone +49 (0)228 99 9582-0 - Fax +49 (0)228 9582-5477 - Infoline +49 (0)228 99 9582-111
This certificate is not an endorsement of the IT Product by the Federal Office for Information Security or any
other organisation that recognises or gives effect to this certificate, and no warranty of the IT Product by the
Federal Office for Information Security or any other organisation that recognises or gives effect to this
certificate, is either expressed or implied.

This certificate and its holder are both subject to obligations and monitoring activities as specified in
Commission Implementing Regulation (EU) 2024/482. This certificate, its holder and its issuer are
furthermore subject to compliance rules and supervision by the National Cybersecurity Certification
Authority as established at Federal Office for Information Security, Division S 14, Freital, Email:

vio CC-Zert-304 EUCC-V5.5