ST is one of the two first companies to achieve EUCC certification in France and Europe for its ST54 product family, an all-in-one NFC controller, eSIM, and secure element for connected devices. This milestone underscores ST's commitment to providing state-of-the-art security solutions that meet the stringent cybersecurity regulations now required in Europe.
With the adoption of the EU Cybersecurity Act (CSA), the European Union (EU) has introduced a new security certification scheme called "EUCC" (EU Common Criteria). The EUCC scheme aims to harmonize cybersecurity standards across all 27 member states, replacing the previous SOG-IS scheme. The EUCC will become an essential certification reference for upcoming European regulations such as the Cyber Resilience Act (CRA) and the cybersecurity update for the Radio Equipment Directive (RED).
Starting in 2026, developers of connected products sold in the EU will leverage this new "EUCC" scheme, which serves as the first reference for higher assurance standards.
The ST54 product family is the first to receive certification from ANSSI, the French cybersecurity agency. This certificate was formally delivered during a ceremony at the Forum Incyber Europe 2025, on April 2.
“ST has once again demonstrated its leadership in European certification by successfully meeting all EUCC requirements at the highest level of assurance. This milestone highlights their unwavering commitment to supporting developers in meeting new regulatory standards on time.” said Franck Sadmi, head of the certification center, ANSSI.
ST has started the gradual migration of its ST54 product family, kicking off with a pilot project that includes the ST54J and ST54K products. These products have been selected with ANSSI for the first EUCC certification, underscoring ST's pioneering role and active contribution to the new European certification scheme. Building on this success, ST will continue the deployment of this new certification process to the rest of its products.
The Common Criteria certification guarantees that each ST certified product is equipped with advanced technology, ensuring robustness against high level potential cybersecurity attacks, and providing state-of-the-art security assurance for connected devices (AVA_VAN5 high resistance). ST maintains the certificate lifecycle over time, continually ensuring that its products are enhanced with robust and future-proof security.
As a key part of the EU Cybersecurity Act, the EUCC scheme offers a new and broader recognition framework for security stakeholder companies doing business in the European Union. With this first EUCC certificate, ST is demonstrating its readiness to meet these important new regulations.
ST’s leadership in security certifications
- 2000: First CC EAL4+ certified secure microcontroller (banking products).
- 2004: First GSMA SAS-UP certified smart card solution.
- 2005: First CC EAL5+ certified secure 32-bit secure microcontroller.
- 2009: First CC EAL6+ certified secure microcontroller (RF product for banking/ID markets).
- 2018: First GSMA SAS-UP certified secure microcontroller in a WCLSP package for mobile.
- 2022: First GSMA-eSA certified eSIM solution.
- 2025: First EUCC CC EAL5+ certified secure microcontroller for mobile.
Additional resource
First published on Apr 24, 2025
