{"id":60491,"date":"2023-11-13T15:09:46","date_gmt":"2023-11-13T20:09:46","guid":{"rendered":"https:\/\/fidodev.wpengine.com\/?page_id=60491"},"modified":"2025-12-18T12:31:47","modified_gmt":"2025-12-18T17:31:47","slug":"fdo-security-certification","status":"publish","type":"page","link":"https:\/\/fidoalliance.org\/fdo-security-certification\/","title":{"rendered":"FDO Security Certification"},"content":{"rendered":"\n<h2 class=\"wp-block-heading has-text-align-left\" id=\"security-evaluation\"><strong>Security Evaluation<\/strong><a href=\"https:\/\/fidoalliance.org\/fdo-security-certification\/#security-evaluation\"><\/a><\/h2>\n\n\n\n<p>Security Certification is comprised of one step, <a href=\"https:\/\/fidoalliance.org\/device-onboarding-overview\/\">FDO<\/a> Security Evaluation, and is required for certifying Device Onboarding Services and Devices. FDO Security Certification validates the security characteristics of an implementation, including adherence to all FDO Security Requirements. Successful completion and evaluation of a vendor questionnaire by the FIDO Security Secretariat is required for at least FDO Certification Level 1 (L1) *.<\/p>\n\n\n\n<p>*Higher FDO Certification Levels may be developed and added to FDO Certification in the future.<\/p>\n\n\n\n<h2 class=\"wp-block-heading has-text-align-left\" id=\"fdo-vendor-questionnaire-vq\"><strong>FDO Vendor Questionnaire (VQ)<\/strong><a href=\"https:\/\/fidoalliance.org\/fdo-security-certification\/#fdo-vendor-questionnaire-vq\"><\/a><\/h2>\n\n\n\n<div class=\"wp-block-group has-eggshell-background-color has-background has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<figure class=\"wp-block-image aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"565\" height=\"1024\" src=\"https:\/\/fidoalliance.org\/wp-content\/uploads\/2024\/01\/sec-evaluation-security-certification-565x1024.png\" alt=\"FIDO Alliance\" class=\"wp-image-68981\" style=\"width:auto;height:300px\" srcset=\"https:\/\/fidoalliance.org\/wp-content\/uploads\/2024\/01\/sec-evaluation-security-certification-565x1024.png 565w, https:\/\/fidoalliance.org\/wp-content\/uploads\/2024\/01\/sec-evaluation-security-certification-165x300.png 165w, https:\/\/fidoalliance.org\/wp-content\/uploads\/2024\/01\/sec-evaluation-security-certification-270x490.png 270w, https:\/\/fidoalliance.org\/wp-content\/uploads\/2024\/01\/sec-evaluation-security-certification-400x725.png 400w, https:\/\/fidoalliance.org\/wp-content\/uploads\/2024\/01\/sec-evaluation-security-certification-600x1088.png 600w, https:\/\/fidoalliance.org\/wp-content\/uploads\/2024\/01\/sec-evaluation-security-certification-500x907.png 500w, https:\/\/fidoalliance.org\/wp-content\/uploads\/2024\/01\/sec-evaluation-security-certification.png 751w\" sizes=\"auto, (max-width: 565px) 100vw, 565px\" \/><\/figure>\n<\/div>\n\n\n\n<p>The FDO Security Requirements were developed based on an assessment of the FIDO Device Onboard (FDO) specification. Security goals, primary and secondary assets, were identified. A threat analysis was completed, and security requirements were defined to mitigate risk for base-level security assurance, FDO Certification L1, for all FDO Devices. The security requirements are administered for evaluation by completing an FDO Vendor Questionnaire through self-assertion. The completed VQ is then submitted for review and evaluation by the FIDO Security Secretariat.<\/p>\n\n\n\n<p>Step #4 of the FDO Certification Process Overview includes FDO Vendor Questionnaire submission information. As abridged context, submit completed FDO Vendor Questionnaires for review and evaluation to:&nbsp;<a href=\"mailto:fdo-security-evaluation@fidoalliance.org\" target=\"_blank\" rel=\"noreferrer noopener\">fdo-security-evaluation@fidoalliance.org<\/a>.&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<p>Please reference the Resource Documentation program page for all documentation that is relevant to FDO Security Certification.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security Evaluation Security Certification is comprised of one step, FDO Security Evaluation, and is required for certifying Device Onboarding Services and Devices. FDO Security Certification validates the security characteristics of [&hellip;]<\/p>\n","protected":false},"author":59250,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"_EventAllDay":false,"_EventTimezone":"","_EventStartDate":"","_EventEndDate":"","_EventStartDateUTC":"","_EventEndDateUTC":"","_EventShowMap":false,"_EventShowMapLink":false,"_EventURL":"","_EventCost":"","_EventCostDescription":"","_EventCurrencySymbol":"","_EventCurrencyCode":"","_EventCurrencyPosition":"","_EventDateTimeSeparator":"","_EventTimeRangeSeparator":"","_EventOrganizerID":[],"_EventVenueID":[],"_OrganizerEmail":"","_OrganizerPhone":"","_OrganizerWebsite":"","_VenueAddress":"","_VenueCity":"","_VenueCountry":"","_VenueProvince":"","_VenueState":"","_VenueZip":"","_VenuePhone":"","_VenueURL":"","_VenueStateProvince":"","_VenueLat":"","_VenueLng":"","_VenueShowMap":false,"_VenueShowMapLink":false,"footnotes":""},"content-type":[],"class_list":["post-60491","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/pages\/60491","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/users\/59250"}],"replies":[{"embeddable":true,"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/comments?post=60491"}],"version-history":[{"count":0,"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/pages\/60491\/revisions"}],"wp:attachment":[{"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/media?parent=60491"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/fidoalliance.org\/wp-json\/wp\/v2\/content-type?post=60491"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}