具有安全防护外壳的硬件设备（含硬件安全模块）
由多个独立组件构成、带物理防篡改外壳并处理敏感数据或密码运算的设备。
类别解释
Hardware devices with security boxes
此类数字要素硬件产品能够安全地存储、处理或管理敏感数据，或执行密码学操作，由多个独立组件组成，并采用能够提供篡改迹象检测、抗篡改或篡改响应能力的物理硬件外壳，作为抵御物理攻击的对策。本类别包括但不限于符合上述描述的实体支付终端、用于生成和管理密码学要素的硬件安全模块，以及行驶记录仪。
English
These hardware products with digital elements securely store, process or manage sensitive data or perform cryptographic operations, consist of multiple discrete components and incorporate a hardware physical envelope providing tamper evidence, resistance or response against physical attacks. The category includes physical payment terminals, hardware security modules for generating and managing cryptographic material, and tachographs.
CRA 附件四，技术描述见实施条例 (EU) 2025/2392 附件二
Annex IV to the CRA, with technical descriptions in Annex II to Implementing Regulation (EU) 2025/2392
制造商可能被要求依照欧洲网络安全认证方案取得欧洲网络安全证书，或接受强制性第三方合格评定；具体取决于后续认证安排的适用情况。
Manufacturers may be required to obtain a European cybersecurity certificate under a European cybersecurity certification scheme, or to undergo mandatory third-party conformity assessment.
关键产品的主要义务
在产品设计中落实更高等级的安全保障，并准备认证或评定所需的安全证据。
持续满足认证所依据的安全保障等级与文档保持要求。
与监管机构及应急响应机制保持协同，及时处理漏洞与事件。
English
- Implement a higher assurance level in the product design and prepare the security evidence required for certification or assessment.
- Continuously satisfy the assurance level and documentation obligations attached to the certificate.
- Cooperate with authorities and incident response mechanisms on vulnerabilities and incidents.