操作系统
提供硬件抽象接口并控制软件执行的基础系统软件。

类别解释
Operating systems
此类软件产品提供底层硬件的抽象接口并控制软件的执行,还可以提供计算资源管理和配置、调度、输入输出控制、数据管理等服务,并提供应用程序与系统资源及外围设备交互的接口。本类别包括但不限于实时操作系统、通用操作系统和专用操作系统。
English
These software products provide an abstract interface of the underlying hardware and control the execution of software, and may provide services such as computing resource management and configuration, scheduling, input-output control and data management, plus an interface through which applications interact with system resources and peripherals. The category includes real-time, general-purpose and specialised operating systems.
CRA 附件三 I 类,技术描述见实施条例 (EU) 2025/2392 附件一第 1–19 项
Class I of Annex III to the CRA, with technical descriptions in Annex I, points 1–19, of Implementing Regulation (EU) 2025/2392
制造商可采用协调标准(或技术规范)证明符合性,据此完成内部合格评定;未适用协调标准时,须按模块 B+C 或模块 H 由公告机构参与评定。
Manufacturers may demonstrate conformity through harmonised standards or technical specifications and self-assess; where no harmonised standard is applied, Module B+C or Module H with a notified body applies.
重要产品 · I 类的主要义务
在默认类别要求基础上,针对该类别核心功能落实更严格的安全设计与默认安全配置。
按所选路径完成合格评定,保留技术文档、风险评估与测试证据以备市场监管核查。
建立结构化的漏洞处理流程,并在支持周期内持续发布安全更新。
English
- On top of the baseline obligations, apply stricter secure-by-design and secure-by-default measures for the core functionality.
- Complete the conformity assessment on the chosen route and keep technical documentation, risk assessments and test evidence for market surveillance.
- Operate a structured vulnerability handling process and release security updates throughout the support period.