Radio Equipment Directive (RED) cybersecurity requirements

28 July 2025

Overview

As of August 1, 2025, the European Union (EU) will enforce mandatory compliance with the Radio Equipment Directive (RED) cybersecurity requirements. These are specified in the EN 18031 standards, which define essential cybersecurity protections for all internet-connected radio equipment placed on the EU market.

What’s Changing

As of August 1, 2025, all internet capable enclosure products will begin shipping with a new maintenance firmware that will have the following changes:

  • The default Wi-Fi and administrator passwords will no longer be based upon the PSN of the product, and will now be a minimum of 12 characters
  • There will be enhanced protection against brute force attacks by adding a cool down period before a new password will be accepted
  • A new CYBERSECSEVENT log is available to review cybersecurity events encountered by the receiver, such as changes in passwords and detection of brute force attacks

What’s Impacted

  • All variants of the PwrPak7, PwrPak7D, CPT7 and CPT7700. These products will have 7.09.02R1 firmware as of Aug 1, 2025
  • The SMART7-I, SMART7-W, and SMART7-SI variants of the SMART7. These products will have 7.09.05R2 firmware as of Aug 1, 2025

What’s Not Impacted

  • OEM7 GNSS cards are intended to be integrated into a larger system or used within a laboratory environment. The system integrator is responsible for providing secure network and physical access to the OEM7 GNSS card(s)
  • For all other enclosure products, the enclosure does not provide internet functionality and therefore is not required to comply with the new directive

Customer Action

No action is required for units already in the EU. New products shipped from NovAtel as of August 1st, 2025* will automatically be RED compliant. A new Declaration of Conformity and firmware download will be available on our website for download as of August 1st, 2025.

Customers with existing inventory of impacted products shall ensure that the product is compliant before shipping into the EU after August 1st, 2025.

*Note: Shipments with new firmware may begin earlier, starting the week of July 28th, to ensure products arriving August 1st, 2025 are compliant.

Questions

For any questions, please reach out to your Sales representative or to Customer support