STQC Certification and CCTV

 STQC Certification and CCTV

CCTV is everywhere now, in metro stations, campuses, warehouses, and housing societies. With that spread comes a tougher question: can you trust what’s on the pole? The government wants a clear “yes”, which is why it’s pushing the market towards standardized, secure-by-design products. The big lever is STQC security certification. It’s not a nice-to-have anymore; it’s the new gate. Manufacturers, integrators, buyers, everyone’s playbook changes in 2025.

STQC, short for Standardization Testing and Quality Certification, is overseen by the Ministry of Electronics and IT (MeitY). Think of it as a seal that says, “This device was built properly and hardened against common attacks.” For surveillance, that covers cameras, DVRs, and NVRs. It looks at product quality, cybersecurity controls, and how data is handled. In other words: fewer soft spots, fewer nasty surprises once the kit goes live.

The Mandatory Requirement

Two dates matter. First, in June 2024, government buyers started insisting on STQC-aligned equipment. Only STQC-certified CCTV products are meant to be sold and integrated in India. No carve-outs for OEMs or import labels. No “we’ll update it later”. If it isn’t certified, it shouldn’t be on the invoice. Simple as that.

As of April 9, 2025, STQC certification is mandatory for all CCTV cameras manufactured, imported, or sold in India. 

·        Government Procurement: Mandatory since June 6, 2024. Any "Made in India" CCTV procured for government projects must strictly adhere to STQC-certified standards.

·        General Market: All IP-based CCTV cameras must comply by the April 2025 deadline to remain legally available for sale.

·        Full Enforcement: From April 1, 2026, no sale of non-compliant CCTV cameras will be allowed, as the previous transition relaxations have been formally withdrawn

Why STQC is mandatory for CCTV?
The Ministry of Electronics and IT (MeitY) made STQC (Standardisation Testing and Quality Certification) mandatory for CCTV systems to ensure:
🔹 Quality & Safety: Cameras must work well and be safe for public use.
🔹 No Spying Risk: To avoid hidden risks like data leaks or spying through poor-quality or foreign-controlled cameras.
🔹 Trusted Performance: STQC checks that the camera meets Indian government standards before it’s used in sensitive places.

✅ STQC = Government-approved safety and quality check for CCTV.

Key Requirements for STQC Certification

This mandate pulls the industry toward “secure by default”. Expect the following to show up in specs and test reports:

·        Secure boot and firmware verification so tampered code can’t sneak in.

·        No default or hardcoded passwords; each device has its own credentials.

·        TLS 1.2+ is a modern way to encrypt streams and management communications.

·        Access restrictions that are quite specific for local and remote logins, together with roles and logs.

·        BIS safety compliance (IS 13252 / IEC 60950-1) where applicable.

·        Chinese-origin OEMs are not eligible for STQC certification.

·        Independent testing at STQC-recognized labs, with proper documentation.

Yes, it’s technical. But it’s also practical. Locked ports. Signed updates. Patch paths that don’t open new holes. That’s how fleets stay healthy.

Who Needs to Comply with This Mandate?

Short answer: the entire chain.

·        Manufacturers, Indian and international, are bringing models to market.

·        OEM partners and importers are rebranding or expanding their ranges.

·        Distributors, retailers, and system integrators are selling or installing systems.

·        Buyers in public projects, smart cities, critical infrastructure, and enterprise.

If you touch CCTV in India, compliance isn’t an afterthought. It’s part of the offer.

What Happens If You Don’t Comply?

Doors close. Non-STQC products become out of bounds for sale and use. You risk being tossed out of tenders. Licenses and approvals can be questioned. Private buyers, especially corporate security teams, will quietly pass. And the reputational hit from a failed audit? That lingers. Why roll the dice when the rules are crystal clear?

Benefits of Using STQC-Certified CCTV Products

In short, here’s what that certification delivers in everyday operations.

·        Stronger cybersecurity out of the box; fewer field incidents, fewer emergency call-outs.

·        Buyer confidence, procurement checks get easier, especially in regulated sectors.

·        Policy alignment with Make in India and Atmanirbhar Bharat priorities.

·        Lower legal and operational risk, plus a smoother path through audits and renewals.

Certification Process for Manufacturers

To obtain the STQC Certificate for CCTV, companies must follow a structured procedure: 

1.   Technical Construction File (TCF): Submit a dossier detailing architecture, firmware versions with hash values, and Bill of Materials (BoM) down to the SoC level.

2.   Lab Testing: Samples are sent to BIS-approved or STQC-recognized labs for functional and cybersecurity stress tests.

3.   Factory Audit: STQC authorities may inspect manufacturing facilities to verify quality control and secure engineering processes.

4.   Labeling: Certified products must display: “This CCTV camera complies with Essential Requirement(s) for Security” on their packaging.

Essential Security Requirements (ER 01:2024)

The Standardisation Testing and Quality Certification (STQC) Directorate validates cameras against Essential Requirements (ER). These are not optional features but mandatory engineering controls: 

·        No Hardcoded Passwords: Each device must have unique credentials; "admin/admin" defaults are prohibited.

·        Secure Boot & Firmware: The camera verifies its own software integrity every time it starts up. Only cryptographically signed firmware can run, so nobody can inject malicious code.

·        Encryption: Mandatory use of TLS 1.2+ for streaming and management data to prevent interception.

·        Physical Security: Requirements for tamper-resistant enclosures and locked physical ports (like UART or JTAG).

·        Data Sovereignty: Prevents sensitive surveillance data from being transmitted to unauthorized foreign servers. Manufacturer debugging interfaces must be shut down before the camera leaves the factory. Open debug ports are one of the most common entry points for hackers.

·        Vulnerability disclosure policy – Brands must maintain a formal process for reporting and patching security flaws. This means ongoing accountability, not just a one-time test.

·        Supply chain transparency – Manufacturers must declare the origin of chipsets, PCBs, and processors. Think of it like ingredient labelling on food; now the government checks where your camera's brain comes from.

Impact of Non-Compliance

Failure to meet these standards results in significant market restrictions:

·        License Cancellation: Existing BIS licenses may be suspended or cancelled.

·        Customs Delays: Imported units lacking certification are often stalled at ports.

·        Tender Disqualification: Non-compliant brands are excluded from lucrative smart city and public infrastructure projects

How to Verify a Specific Model

Certification is awarded at the model level, not just the brand level. You can verify a specific camera by: 

1.   Checking the Packaging: Look for the mandatory text: "This CCTV camera complies with Essential Requirement(s) for Security".

2.   Official Portal: Visit the STQC Certified Products List and search by manufacturer name or certificate number.

Understanding BIS ER Approval

Until recently, a CCTV camera only needed to pass a basic electrical safety test (IS 13252) to be sold in India. That test checked whether the camera was safe to plug in: protection against electric shock, insulation, and fire hazards. That's it.

Alongside STQC, BIS ER (Bureau of Indian Standards – Electronics Registration) approval is another essential regulatory requirement for electronic surveillance equipment sold in India. 

The BIS ER approval indicate strengthens trust among distributors, channel partners, and enterprise buyers who prioritize regulatory compliance during vendor evaluation.

What BIS ER Approval Ensures

·        Conformity to Indian safety standards

·        Electrical safety compliance

·        Product testing through recognized labs

·        Mandatory registration before market sale

Key Aspects of BIS-ER-01 Certification

·        Objective: Adds a mandatory cybersecurity layer to existing electrical safety standards for IP cameras and security equipment.

·        Mandatory Status: Essential for legal sale or import of surveillance products in India.

·        Testing Focus: Evaluates debug interfaces, password complexity, and access controls.

·        Deadline/Timeline: The deadline for implementation was April 9, 2025.

·        Application: Often involves collaboration with BIS-designated labs for testing and submission through official channel

BIS guidelines are listed below to comply with the Essential Requirements for CCTV Cameras. 

While some of it may sound complicated, not to worry, we are here to simplify it for you.  Email us or call us – we are happy to discuss and guide you 

·        Existing licensees of ‘CCTV Cameras’ as per IS 13252 (Part 1) : 2010/ IEC 60950-1 : 2005 

o   Existing licensees of CCTV Cameras shall apply online through the “Apply for Standard Revision/ Amendment/ Essential Requirement” module along with test report for ER: 01.

o   Applicable Fees: 

§  Inclusion test report: INR 30,000/- + applicable taxes per test report 

§  Additional test report: INR 20,000/- + applicable taxes per test report 

o   All non-compliant models shall be deleted from the scope of License and registration shall be liable for cancellation after 09 April 2025.  

·        New Applicants of CCTV Cameras: 

o   Applications for CCTV Cameras may be submitted along with test report for ER: 01 in addition to test report as per IS 13252 (Part 1): 2010. 

o   Processing of Applications without test report for ER: 01 shall be permitted only upto 09 April 2025. 

o   In case of above point no. 3 (B) (ii), a declaration from the applicant will also be required to submit that they will implement the revised Standard by 09 April 2025. 

o   Beyond 09 April 2025, above point no. 3 (B) (ii) will not be valid and registration will not be granted to such applications which are not complying with ER: 01 

·        Change in Scope of License:

o   Inclusion applications for CCTV Cameras may be submitted along with test report for ER: 01 in addition to test report as per IS 13252 (Part 1): 2010. 

o   Processing of Applications without test report for ER: 01 shall be permitted only upto 09 April 2025. 

o   In case of above point no. 3 (C) (ii), a declaration from the applicant will also be required to submit that they will implement the revised Standard by 09 April 2025. 

o   Beyond 09 April 2025, above point no. 3 (C) (ii) will not be valid and registration will not be granted to such applications which are not complying with ER: 01. 

o   Existing Licensees shall not use the Inclusion module to apply for implementation of Essential requirements of registered models. Instead, they may use the module as already mentioned in 3 (A)(i). 

·        Models complying with the above Order may display the following on the packaging: “This CCTV camera complies with Essential Requirement(s) for Security”.  

·        Provision for generating Test Request for ER for Security of CCTV– ER: 01 has been made live on BIS Portal. 

STQC vs BIS ER – Which One Do You Need?
In today’s regulatory environment, certifications are not just about compliance—they’re about trust, credibility, and market access. Two certifications that often create confusion are STQC (Standardisation Testing & Quality Certification) and BIS ER (Bureau of Indian Standards – Essential Requirements). While both deal with product quality and safety, their application areas and target customers differ significantly.

STQC (Standardisation Testing & Quality Certification)
 • Primary Customers: Government departments, PSUs, and organizations working on e-Governance, IT infrastructure, and software/hardware systems.
 • Focus: IT systems, biometric devices, smart cards, e-sign, and other digital infrastructure components.
 • Why It’s Needed: Many government tenders and projects mandate STQC certification to ensure reliability, interoperability, and adherence to national security/quality standards.

BIS-ER ( Bureau of Indian Standards – Essential Requirements)
 • Primary Customers: Private manufacturers, importers, and businesses selling electronic/IT products in the Indian market.
 • Focus: Consumer electronics, IT equipment, household gadgets, and other electronic products listed under the Compulsory Registration Scheme (CRS).
 • Why It’s Needed: BIS ER is mandatory for commercial sale in India—without it, businesses cannot legally sell or market their products.

In simple terms
 • Government Projects → STQC Certification (trust + compliance in IT/e-governance ecosystem).
 • Market Access (Retail/Commercial) → BIS ER Certification (legally required for selling electronic products in India).

From Today onwards (April 1, 2026): what changes

The government gave the industry time to prepare. New BIS licences without ER-01 compliance stopped being issued from April 9, 2025. Brands that didn't get certified could sell existing warehouse stock for a while, but that grace period is now over.

From April 1, 2026, selling a non-compliant camera in India carries fines of up to 10× the product's value and up to 2 years in prison. BIS is already raiding warehouses.

Existing cameras already installed in your home or office are unaffected. The rule targets new sales, not existing use. And analog cameras are exempt; this applies only to IP (network-connected) cameras.

How to add a microphone to an IP Camera

How to add a microphone to an IP Camera

Most security cameras that are outdoor rated do not come with built-in microphones to ensure that no water can leak in. This means that you must add an external security camera microphone to these cameras in order to record audio. CCTV Camera World carries microphones for indoor or outdoor cameras. Most IP security cameras with audio input capabilities have an RCA audio connector on their pigtail for connecting a microphone. Some dome IP cameras have a connection block on the inside of the dome. In either case, physically connecting and configuring external microphones to an IP security camera is easy as shown in this guide.

How to tell which camera you have?

In case you are unsure, here's a quick image to help you understand which type of audio connection your IP camera has.

Depending on whether your camera has a RCA or two-wire line in connection, please follow the appropriate section below.

1.   Connecting a microphone using RCA input

2.   Connecting a microphone using two-lead wire

3.   Enabling audio-input on the camera

 

 

 

Setup for IP Cameras with RCA Audio Input connectors

What's needed?

Here is what you need to connect a microphone to an IP camera that has RCA audio inputs:

1. Outdoor Microphone (sku 71891) or Indoor Microphone (sku 7100CC)
2. 12V DC 500mA Power Supply (sku 12V5MA)
   You can also use PoE Power Splitter (sku POE101D) with DC Power Splitter Cable (sku DC-PJJ)
3. RCA Male to RCA Male Adapter (sku RCA01)

How to connect a microphone to an IP camera that has RCA audio input

Below is a diagram of how to connect an external microphone to the RCA audio connector on an IP camera.

It is easy to connect a mic by following these easy to follow steps:

1. Connect the microphone to the RCA audio input on the camera's pigtail using a RCA Male to RCA Male connector
2. For longer runs between the camera and microphone you can use an RCA cable with male ends to connect the input and output.
3. Connect the power connector from the 12V DC Power Supply to the female power jack on the microphone.

Alternatively, you can also use a PoE Power Splitter with a 1-to-2 DC Power Splitter to use PoE power for the microphone and camera. Simply connect the PoE cable into the PoE splitter. Then split the power to the camera and microphone using the DC splitter. The data cable for the PoE splitter then connects to the camera for data.

After you have correctly wired the microphone to the camera you can continue to the rest of the article to find out how to enable the cameras audio input for listening and recording.

Setup for IP Cameras with Audio Line-in Input

Some IP security cameras include an internal audio line-in block or a two-wire lead that requires a two-lead connection for connecting a microphone. At first it may seem puzzling how a microphone with a RCA connection would connect to a two-wire input. As an example, in the section below we use a video balun, BNC to RCA connector, and two-lead wire to connect the microphone to the line-in block.

What's needed?

You will need the following items to connect a microphone to a camera with a line-in audio connection consisting of two-lead cabling.

1.   Outdoor Microphone - (sku 71891) or Indoor Microphone (sku 7100CC)

2.   12V DC 500mA Power Supply (sku 12V5MA)
You can also use PoE Power Splitter (sku POE101D) with DC Power Splitter Cable (sku DC-PJJ)

3.   Video Balun (sku VB2PHD)

4.   BNC Female to RCA Male Connector (sku BNCRCA02)

5.   Two-lead Wire for the balun

Best Practices for Using A Two-Way Audio Security Camera

Whether you have a security camera system for a home or business, the need for two-way audio interaction with talk-back capability may arise. CCTV Camera World offers solutions for both one-way and two-way audio. One-way audio is great for listening to sound originating from the location of a camera, but it will not allow interaction with a person at that location. To be able to interact with a person at the camera, the camera would have to have two-way talk capabilities, i.e. a speaker and microphone built-in similar to an intercom.

Two-Way Audio Setup With PoE NVR

Step 1) Connect cameras to NVR

In this guide, we will be using our security camera with two-way audio, sku IP3MPA.  It is a two-way audio IP camera that allows the user to not only listen-in, but also talk back to the person at the camera. These cameras are very easy to connect using the plug-and-play technology. In the video demonstration above we show how easy it is to connect our PoE IP cameras to our PoE NVRs. Simply connect the cables between the camera and the NVR. A single network cable transmits power and data to each camera from the NVR, and plug-and-play technology handles IP address configuration between the camera and NVR without user intervention.

Using a Web Browser for Two-Way Audio

Our camera systems allow the user to engage in two-way talk over the network by using Internet Explorer on a computer or by using our iOS and Android apps for both phones and tablets. First, we will demonstrate how to use the web portal called Web Service in our security systems. A Windows PC running Internet Explorer is required for two-way talk capability through the web browser. To be able to talk-back, you will need to make sure you have a headset or combination of microphone and speaker on your PC to listen and talk-back.

All DVRs and NVRs from CCTV Camera World are network devices and have their own IP address. You first need to connect your security camera system to your network by assigning the DVR/NVR an IP address that fits your network scheme. Once that is complete, you will be able to view your system from a computer or smartphone and use the two-way audio feature over the network. If you wish to view the system over the web when away from home, you will need to set port forwarding rules on your router's firewall to allow remote viewing from the internet.

Once your system is properly connected to your network and port forwarding rules have been created on your firewall, you will be able to engage in two-way audio communication using your smartphone, tablet, or PC from anywhere in the world where Internet is available.

Step 2) How to use two-way talk on Internet Explorer

1.   Open an Internet Explorer window on your Windows PC and type in either your NVR's IP address for local viewing, or external IP address for remote viewing.

2.   Type in your system's username and password, and select Login.

3.   Make sure audio is enabled in your two-way camera by going to Setup and Encode.

4.   Click the Audio Enable check boxes for both the Main and Sub Streams (if they are not already checked).

5.   Select OK to ensure your settings have been saved.

6.   Click the Preview tab to view your camera's live feed.

7.   Select the channel by clicking the quadrant containing the video feed. A green frame will appear around the video feed to distinguish the selected channel.

8.   Select the Speaker Icon in the top-right corner of the selected camera's video feed for one-way audio. This will allow you to hear audio that's taking place at the location of your camera.

9.   To talk back and send out audio through the camera's speaker, select the Microphone Icon in the top-right corner of the selected camera's video feed. You will need either a headset with microphone, or a combination of microphone and computer speakers to listen and talk back.

Now you will be able to listen and talk back to someone at the location of your camera. Note that you will be able to listen to camera audio feeds one at a time - you will not be able to listen to multiple audio feeds simultaneously. Multiple users can listen to one-way audio from a camera, but the talk back function is done by one user at a time.

If a computer is not available to view your two-way audio camera system, then proceed to the next section where we explain how to use two-way talk with a smartphone or tablet.

Two-Way Audio Interaction Using iOS or Android Phone/Tablet

A more convenient way of viewing you security camera system and engaging in two-way audio talk is through your mobile device. The App allows the user to hear incoming audio from the camera and uses the microphone from the phone to talk back, sending out audio through the camera's speaker.

Step 3) How to use Two-Way Talk with a Smartphone or Tablet

1.   First, Open the app (iDMSS) on your iPhone or Tablet (or gDMSS for Android devices).

2.   Select the Menu Icon in the top-left corner, and choose Device Manager.

3.   From here, select the Plus Sign in the top right corner,  Wired Device and then IP/Domain.

4.   Fill out the appropriate credentials of your NVR. You will need to create two entries - one for viewing at the location of your system using Wi-Fi, and second entry for when viewing remotely over the internet away from home. We have a tutorial on how to create entries for both local and remote viewing. After all credentials have been entered, select Start Live Preview.

5.   Select the camera channel you want to engage in two-way audio with by tapping the video feed from that camera, and then press the Speaker Icon. The speaker icon allows the user to  listen to incoming audio from the camera and talk-back sending out audio through the camera's speaker.

Briefly, here is what we did:

1.   Open the dome cover of the camera using the included hex-key tool. Do not use powered screwdrivers or drills or you will damage the dome.

2.   Connect the BNC Female to RCA Male connector to the balun.

3.   Connect the RCA Male tip to the RCA input on the microphone.

4.   Use the video balun to wire in the two lead wire, tighten the screw-downs for the wires.

1. Make sure that you remember the polarity for your wires. We suggest using Red for the positive wire, and Black/Striped for the ground/negative wire.
2. Having a bad connection or the wrong polarity will not record sound or have loud interference.

5.   Locate the small rubber insert next to the Audio/Alarm block and create a small hole for the wires.

6.   Slightly unscrew the screw-down for the Audio-In connector on the block. Insert the positive wire from the video balun and screw it down.

7.   Slightly unscrew the screw-down for the ground connector (GND). Insert the ground wire from the video balun and screw it down.

8.   Run the power cable for the microphone to the 12V DC power supply that is connected to a 220V AC power outlet. Connect the power supply to the microphone.

a)   Alternatively you can use a PoE splitter with a 1-to-2 DC power splitter.

b)   Connect the PoE cable for the camera to the PoE splitter. Then connect the PoE splitter to the 1-to-2 DC power splitter.

c)   Connect the camera and microphone to the DC power splitter connectors.

d)   Connect the RJ45 jack coming from the PoE splitter into the pigtail on the camera.

Once you finally have your camera and microphone connected you can continue to follow the rest of this guide to learn how to enable audio input on the camera.

How to enable audio recording on an IP camera

After everything is connected you must configure the camera to recognize and use the external microphone. This step is extremely important before trying to listen and record a camera. Do not assume that the camera is automatically recording audio when you plug the microphone in.

Using Internet Explorer to enable and modify audio settings

In the video below we show how to use Internet Explorer to login and modify the settings on an IP camera. This process requires knowing what the IP address of the camera is. After that it is as easy as logging in and going to the Settings page. Navigate to the Camera > Audio page. There you will find the audio settings for the camera. You can enable audio for Main-stream or Sub-stream, fine tune the volume settings, and enable the noise filter. Also if a camera has a built-in microphone you can set it to use the external microphone instead.