CPA scheme closed
The CPA Smart Metering scheme is now closed.
Page 2 of 3
Information for manufacturers
Note (updated 17 March 2025)
In February 2024 the Department for Energy Security and Net Zero (DESNZ) announced a consultation relating to changes impacting the Commercial Product Assurance (CPA) scheme for the assurance of Smart Metering devices. The purpose was to appoint a new Scheme Operator and for the NCSC to withdraw from CPA. Details can be found at https://smartenergycodecompany.co.uk/department-for-energy-security-net-zero-consultation-on-changes-to-the-sec-relating-to-the-commercial-product-assurance-cpa-scheme/
That consultation has with CyTAL UK has been appointed as the new CPA Scheme Operator.
On the 7th March 2025, the Department for Energy Security and Net Zero (DESNZ) designated the second version of the CPA Transition Approach Document (CPA TAD), which can be found at https://smartenergycodecompany.co.uk/documents/sec/response-to-the-consultation-on-revised-designation-date-for-sec-appendix-av-cpa-tad-v2-7-march-25/ and sets out the arrangements for managing ongoing smart metering device evaluations following the appointment of the new CPA Scheme Operator (https://smartenergycodecompany.co.uk/transition-of-cpa-scheme-ownership-to-ssc-and-appointment-of-new-scheme-operator/).
The NCSC is no longer the CPA Scheme Operator. More information is available from https://smartenergycodecompany.co.uk/commercial-product-assurance-cpa/
The NCSC are no longer accepting CPA work as we move towards the closure of the NCSC CPA scheme. The NCSC CPA web pages will be removed completely in due course. This will include Certificate, Scheme docs and Security Characteristics pages.
SECAS (Smart Energy Code Administrator & Secretariat) have created their own pages that are now the reference source for ongoing CPA information:
- CPA SC page: https://smartenergycodecompany.co.uk/commercial-product-assurance-cpa-security-characteristics/
- CPA SC archive: https://smartenergycodecompany.co.uk/cpa-security-characteristics-archive/
- Approved Test Labs: https://smartenergycodecompany.co.uk/cpa-approved-test-labs/
- CPA Certified Devices: https://smartenergycodecompany.co.uk/cpa-verified-suppliers/
About the CPA scheme
The Commercial Product Assurance scheme was set up to help companies demonstrate that the security functions of their products meet defined NCSC standards (known as Security Characteristics). We use NCSC assured Evaluation Partners to conduct product testing and assessment.
What products are covered by CPA?
The CPA scheme assures Smart Meters or recognised smart metering products which currently include; Gas Smart Metering Equipment (GSME), Electricity Smart Metering Equipment (ESME), Smart Metering Communications Hub (Comms Hub) and HAN Connected Auxiliary Load Control Switches (HCALCS) and Standalone Auxiliary Proportional Controller (SAPC).
Get a smart meter certified
To get a smart meter certified, you must have a UK sales base - that is a requirement of CPA.
You then need to review the standards against which your product will be assessed. These standards are known as Security Characteristics and you can find them in the scheme documents.
Finally, you need to pick an Evaluation Partner to conduct the assessment. There are currently two assured by the NCSC:
Certification
Smart Metering certificates have historically been issued with a 6-year validity. However, these are now in the process of being phased out (at the point of expiry) and replaced with a “lifetime” certificate, the validity of which will be dependent on the outcomes of a periodic Risk Review (usually every 6 years) against the latest version of the CPA Security Characteristic. All new evaluations will now be issued a “lifetime” certificate on successful completion. Any CPA certificates that have already been issued will continue to be valid – for all products - until their specified expiry date or are removed.
If you are looking for an old version of a Security Characteristic for a non-smart metering product then please see the Security Characteristics archive page.
If you’re the looking for assurance of a non-Smart Metering product or your sales base is broader than just the UK public sector, you may want to look at the internationally recognised Common Criteria scheme.
Security characteristics
Security Characteristics that product developers and purchasers can use to understand which security functions are being assessed by the Evaluation Partners. The latest versions of the Smart Metering Security Characteristics are in the downloads section below.
Downloads
- 750.38 KB
CPA Security Characteristic Standalone Auxiliary Proportional Controller (SAPC)
Describes requirements for assured SAPC products for evaluation and certification under CPA.
- 883.02 KB
CPA SC smart metering communications hub
Communications hubs are hybrid devices which includes two logically separate functions.
- 668.59 KB
CPA SC smart metering HAN CALCS
HAN connected auxiliary load control switches control the load on an electricity supply
- 709.44 KB
CPA SC Electricity smart metering equipment
The ESME security characteristic v1.4 of November 2021.
- 689.01 KB
CPA SC Gas smart metering equipment
The GSME security characteristic v1.4 of November 2021.
- 536.66 KB
CPA SC Triage interface updates
Triage interface updates to GSME, ESME, & SAPC security characteristics and CPA Build Standard Extensions. v2.1
- 521 KB
CPA SC Agreed interpretations
This document identifies interpretations issued by the NCSC and the SEC Panel’s Security Sub Committee.