具有虚拟专用网络（VPN）功能的数字要素产品
利用网络系统资源构建加密逻辑隧道的产品。
类别解释
Products with digital elements with the function of virtual private network (VPN)
此类产品使用物理或虚拟网络的系统资源构建加密的逻辑隧道。本类别包括但不限于虚拟专用网络客户端、虚拟专用网络服务器及虚拟专用网络网关。
English
These products establish an encrypted logical tunnel that is constructed from the system resources of a physical or virtual network. The category includes virtual private network clients, servers and gateways.
CRA 附件三 I 类，技术描述见实施条例 (EU) 2025/2392 附件一第 1–19 项
Class I of Annex III to the CRA, with technical descriptions in Annex I, points 1–19, of Implementing Regulation (EU) 2025/2392
制造商可采用协调标准（或技术规范）证明符合性，据此完成内部合格评定；未适用协调标准时，须按模块 B+C 或模块 H 由公告机构参与评定。
Manufacturers may demonstrate conformity through harmonised standards or technical specifications and self-assess; where no harmonised standard is applied, Module B+C or Module H with a notified body applies.
重要产品 · I 类的主要义务
在默认类别要求基础上，针对该类别核心功能落实更严格的安全设计与默认安全配置。
按所选路径完成合格评定，保留技术文档、风险评估与测试证据以备市场监管核查。
建立结构化的漏洞处理流程，并在支持周期内持续发布安全更新。
English
- On top of the baseline obligations, apply stricter secure-by-design and secure-by-default measures for the core functionality.
- Complete the conformity assessment on the chosen route and keep technical documentation, risk assessments and test evidence for market surveillance.
- Operate a structured vulnerability handling process and release security updates throughout the support period.