Key management device refers to hardware or appliance used to generate, manage, store, protect or distribute cryptographic keys, commonly seen as HSM (Hardware Security Module), KMS appliance, key vault, PKI/KMIP key server or a dedicated cryptographic key-management appliance. If the product is declared only as “server”, “security appliance” or “crypto box”, the shipment may face HS misclassification, missing civil cryptography licence, model inconsistency between Invoice – Packing List – catalogue – licence, additional dossier requests and DEM/DET exposure.

E2E map: this article provides a pre-ETA review framework for the single product key management device, covering HS Code, duties, C/O, civil cryptography policy, customs dossier, clearance decision points and risk checklist.

QUICK FACT

Review item	Guidance for key management device	What to close before ETA
Product scope	Hardware/appliance used to generate, manage, store, protect or distribute cryptographic keys.	Do not automatically apply this article to encryption modules or crypto appliances with different model/function.
Reference HS Code	8471.30.90 / 8471.41.90 / 8471.49.90 / 8471.80.90 should be reviewed where the device is an automatic data processing unit with key-management function. 8517.62.* is only for review where the main nature is network data transmission/reception/conversion.	Close classification based on catalogue, datasheet, CPU/storage, network ports, HSM/KMS/KMIP/PKI features and commercial description.
Import duty	Many 8471/8517 lines commonly show MFN reference duty of 0%; ordinary and special preferential duty must be checked by the actual HS at declaration date.	Do not lock duty without tariff and C/O verification.
VAT	May be 8% or 10% depending on declaration date and the exclusion appendix of the VAT reduction policy.	Do not self-apply 8% if the goods fall into excluded groups.
Specialised policy	Main focus is civil cryptography. If the device also has cybersecurity, wireless, Wi-Fi/4G/5G, battery, adapter or other module, review the corresponding policy separately.	Review licence features, algorithms, key-generation/storage/management function and conformity documents if any.
Key dossier	Invoice, Packing List, B/L/AWB, C/O if any, catalogue/datasheet, model list, user manual, cryptographic specification, MMDS licence/conformity dossier if applicable.	Product name, model, serial, HS, quantity, origin and technical characteristics must match across documents, licence and declaration.

Legal note: Under Decree 211/2025/ND-CP, the list of civil cryptography products subject to export/import licence applies only when the HS code, goods description and cryptographic technical characteristics match the list. Therefore, a key management device must be reviewed by catalogue, datasheet, model, import purpose and actual cryptographic characteristics before concluding the policy.

SCOPE OF APPLICATION

This article applies only to key management device in hardware/appliance form used in cryptographic, PKI, KMS, HSM, KMIP or enterprise key-management infrastructure.

Not automatically applicable to the whole group “Encryption Device/Module; Key Management Device; Crypto Appliance”.
New, used, refurbished, sample, warranty/RMA or project cargo may trigger different policies.
If the device includes network modules, Wi-Fi/Bluetooth/4G/5G, battery, adapter, software licence, VPN or IP-flow encryption, each component must be reviewed separately.
Review must be based on actual catalogue, datasheet, model and import purpose.

CLASSIFICATION & TECHNICAL IDENTIFICATION

Technical identification

A key management device may generate, store, distribute or protect keys; manage digital certificates; integrate PKI/KMIP; or operate as an HSM, rackmount appliance or module embedded in a larger system.

Risk of wrong description

Generic descriptions such as “server”, “IT equipment” or “security appliance” may trigger requests to clarify cryptographic nature, HS, MMDS licensing, conformity and model consistency.

Checkpoint	Documents to compare	Risk if misdescribed	Suggested customs/commercial description
Main function	Catalogue, datasheet, user manual	Wrong HS or specialised policy	Cryptographic key management device, model…, used to generate/store/manage cryptographic keys
Cryptographic characteristics	Encryption/key-management specification, FIPS/CC if any	Missing MMDS licence or conformity dossier	State HSM/KMS/KMIP/PKI function, algorithm and use scope
Hardware configuration	CPU, RAM, storage, ports, modules	Confused with ordinary server or network device	Describe dedicated appliance and included accessories
Model/serial	Model list, serial list, original label	Licence does not match declaration or actual goods	Keep exact model characters as published by manufacturer
Accessories/power supply	Packing list, datasheet, goods photos	Missing adapter, battery, wireless module or licence	List accessories if imported as a set

HS CODE – DUTY – C/O

HS Code depends on the technical nature: automatic data processing unit, dedicated module/appliance, or network device with key-management function. The commercial name alone is not sufficient.

Reference HS Code	Condition for use	Risk if incorrect	Documents to compare
8471.30.90 / 8471.41.90 / 8471.49.90	Where the goods are automatic data processing machines/units with key-management function.	Reclassification if the main nature is network communication or other electrical apparatus.	Catalogue, datasheet, configuration, label photo.
8471.80.90	Other units of automatic data processing machines; review where the device is a dedicated unit of an IT system.	Wrong HS and MMDS list if Appendix requires matching HS.	Technical dossier, system diagram, model list.
8517.62.*	Only where the main nature is network data transmission/reception/conversion with encryption/key-management feature.	Misuse of network group for a dedicated key-management device.	Network port datasheet, routing/switching/encryption features.
Other HS if technical nature differs	Where catalogue shows a specialised nature not covered above.	Insufficient basis for customs classification.	Technical dossier and classification opinion if needed.

Tax/VAT item	Reference guidance	Application note
Ordinary import duty	Check by actual HS and tariff at declaration date.	Not a substitute for official classification.
MFN duty	Many 8471/8517 lines commonly have 0% MFN reference duty; verify by 8-digit HS.	Duty may change if another HS applies.
VAT	8% or 10% depending on declaration date and VAT reduction exclusions.	Do not self-apply 8% without checking exclusions.
Special preferential duty with C/O	May be 0% if C/O is valid under the relevant FTA.	If MFN is already 0%, C/O mainly supports origin control.

C/O may be rejected if form, origin criterion, goods description or HS Code does not match Invoice/B/L/customs declaration. Draft C/O should be reviewed before issuing the original.

APPLICABLE SPECIALISED POLICY

Goods scenario	Possible policy	Documents to check	Authority/portal if identifiable	When to handle	Risk note
Device generates/stores/manages cryptographic keys	Civil cryptography import licence; conformity assessment/declaration if applicable.	Catalogue, datasheet, cryptographic specification, conformity certificate if any.	Government Cipher Committee / Civil Cryptography Management authority.	Before ETA, preferably before shipment.	Do not wait until cargo arrival.
Device also qualifies as cybersecurity product	Additional cybersecurity import licence may apply if it falls under the list.	Security features, licence feature, ATTTM list.	MIC/AIS if applicable.	Before ETA.	MMDS and ATTTM licences are separate policy layers.
Wireless module included	ICT conformity/quality inspection may arise.	Module datasheet, frequency, power, test report.	MIC/VNTA/service portal if applicable.	Before ETA or pre-clearance depending on policy.	Accessory module can change policy.
Battery/adapter included	Electrical safety, labelling and battery transport review.	Packing list, power adapter datasheet, battery MSDS if any.	Relevant specialised authority if applicable.	Before booking transport.	Lithium battery may affect air/sea transport.
Used/refurbished goods	Used equipment policy or other restrictions may apply.	Year of manufacture, condition, contract, manufacturer confirmation.	Customs/specialised authority by case.	Before purchase/shipment.	Do not treat as new goods.
EPE/FDI/factory import	Customs purpose, import right and post-clearance retention.	Contract, PO, use purpose, project dossier.	Local customs authority if applicable.	Before ETA.	Licence review still applies if MMDS.

LEGAL DOCUMENTS TO REVIEW

Document group	Name/number	Issuer	Effective date/application time	Role in procedure	Key articles/appendices	Review note
Law	Law on Cyberinformation Security 2015	National Assembly	Check current validity before use	Framework for civil cryptography and cybersecurity.	Civil cryptography provisions.	Use the latest consolidated status.
Decree	Decree 211/2025/ND-CP	Government	Effective 09/09/2025	Civil cryptography activities, product list and import/export licence.	Articles 3, 4, 7; Appendix II for import/export licensing; Appendix I when reviewing business/conformity requirements; Forms 07/08 if applicable.	Core document for key management device.
Circular	Circular 10/2022/TT-BTTTT amending Circular 13/2018/TT-BTTTT	MIC	Effective 15/09/2022	Review if the device also falls under cybersecurity import licence list.	Cybersecurity product list/dossier if applicable.	Does not replace MMDS licence.
Decree	Decree 43/2017/ND-CP and Decree 111/2021/ND-CP	Government	01/06/2017 and 15/02/2022	Goods labelling and Vietnamese sub-labels.	Label content, origin, responsible entity.	Check original label before ETA.
Tariff	Decree 26/2023/ND-CP and Decree 199/2025/ND-CP	Government	15/07/2023 and 08/07/2025	MFN tariff and amendments.	Tariff appendices by actual HS.	Check at declaration date.
VAT	Resolution 204/2025/QH15; Decree 174/2025/ND-CP; Decree 181/2025/ND-CP; Decree 359/2025/ND-CP; Decree 144/2026/ND-CP	National Assembly/Government	204/2025 and 174/2025 effective 01/07/2025; 181/2025 effective 01/07/2025; 359/2025 effective 01/01/2026; 144/2026 effective 20/06/2026	VAT reduction policy, VAT Law implementing guidance and relevant amendments.	Exclusion appendix, declaration date, actual product description/HS.	Do not self-apply 8%; check the VAT rules effective on the declaration date.

VIEW / DOWNLOAD ORIGINAL LEGAL TEXTS

Enterprises should additionally verify the documents on the official legal document portal or issuer websites before application.

Decree 211/2025/ND-CP Decree 26/2023/ND-CP Decree 43/2017/ND-CP

CUSTOMS DOSSIER

Commercial documents

Commercial Invoice.
Packing List.
Bill of Lading/Air Waybill.
Sales Contract/Purchase Order if any.
C/O if preferential duty is claimed.
Catalogue, datasheet, user manual, model/serial list.

Specialised documents if applicable

Civil cryptography product import licence.
Conformity certificate/declaration if applicable.
Cryptographic specification, algorithm and key-management documents.
Test report/technical certificate if any.
Labelling dossier and original label photos.

Dossier group	Required document	Used for	Usually prepared by	Common error	Pre-ETA check
Commercial	Invoice, Packing List, Contract/PO	Declaration, value, payment	Importer, shipper, purchasing	Generic goods name, missing model/serial	Cross-check with catalogue and label.
Transport	B/L/AWB, arrival notice, pre-alert	Delivery order, declaration, ETA tracking	Forwarder, agent, shipper	Wrong consignee/package/description	Verify before arrival.
Technical	Catalogue, datasheet, user manual, model list	HS, policy, licence	Manufacturer/supplier, IT team	Missing cryptographic characteristics	Request official documents by model.
MMDS	Import licence, conformity certificate if any	Clearance and post-clearance retention	Compliance, importer, service provider	Licence mismatch with model/HS/quantity	Lock model list before licence submission.
C/O	Draft/original C/O, invoice, B/L	Preferential duty, origin control	Shipper, exporter, importer	Wrong form, HS or description	Review draft C/O before original issuance.

Mandatory rule: goods name, quantity, model, serial, origin, technical specifications and cryptographic characteristics must match across commercial documents, catalogue, labels, specialised licence and customs declaration.

DECISION POINTS THAT MAY HOLD THE SHIPMENT

Decision point	Question to answer	Evidence	Consequence if unclear	Recommended action
HS Code	Is the device an ADP unit, network device or other specialised apparatus?	Catalogue, datasheet, function diagram	Reclassification, duty/policy change	Close HS before ETA.
MMDS	Does the model generate, store, manage or protect cryptographic keys?	Key specification, user manual	Missing MMDS import licence	Review Appendices of Decree 211/2025/ND-CP.
Conformity	Is conformity certification/declaration required?	Certificate, test report if any	Insufficient licence/clearance dossier	Determine before filing licence dossier.
Model/serial	Do documents match catalogue, label and licence?	Model list, serial list, label photos	Goods may be treated as different from licence	Keep exact manufacturer model.
C/O	Is C/O correct in form, criterion, HS and description?	C/O, invoice, B/L, origin rule	Preferential duty rejected	Review draft C/O before shipment.
Goods condition	New, refurbished, warranty or sample?	Invoice, RMA, manufacturer confirmation	Different policy may apply	State condition and import purpose clearly.

E2E OPERATIONAL PROCESS

Step 1: Pre-ETA review

Close HS, MMDS policy, VAT, C/O, labelling and goods condition; determine whether an MMDS import licence is required.

Step 2: Lock technical documents

Finalize Invoice, Packing List, B/L/AWB, catalogue, datasheet, user manual, model/serial list and cryptographic specification.

Step 3: Handle specialised licence

Submit MMDS licence/conformity dossier if applicable; do not wait until cargo arrival.

Step 4: Customs declaration

Green lane: conditional system clearance; Yellow lane: document check; Red lane: document and physical inspection.

Step 5: Clearance and delivery

Complete duty/VAT, release cargo, arrange delivery and control labels/specialised dossier if applicable.

Step 6: Post-clearance file retention

Retain licence, C/O, catalogue, conformity documents, HS/policy explanation and transport documents by shipment.

PRE-ETA RISK CHECKLIST

Risk	Impact	How to block before ETA	Documents to review
Generic product name	Wrong HS/policy and explanation request	Standardize name by cryptographic key-management function	Invoice, PL, catalogue, datasheet
Missing MMDS licence	Cargo hold, storage charges, project delay	Review Decree 211/2025/ND-CP before shipment	Datasheet, cryptographic specification, model list
Licence mismatch	Not eligible for clearance or dossier amendment	Lock model list before licence filing	Licence, invoice, packing list
Missing conformity/technical certificate	Incomplete licence or circulation dossier	Determine conformity requirement early	Test report, certificate, standards
Incorrect C/O	Preferential duty denied or C/O amendment required	Review draft C/O before original issuance	C/O draft, invoice, B/L
VAT not reviewed by declaration date	Wrong tax declaration	Check VAT policy and exclusion appendix	Tariff, VAT documents, draft declaration

FAQ

Does a key management device require an import licence?

Possibly yes, if HS code, goods description and cryptographic characteristics match the list under Decree 211/2025/ND-CP. Review by actual model.

Is conformity certification required?

It may arise if the product is subject to conformity assessment/declaration for civil cryptography products. Do not conclude without datasheet and technical dossier.

Is a normal server with KMS software treated the same?

Not automatically. If it is merely a general-purpose server without dedicated cryptographic hardware/function, policy may differ.

Can C/O reduce duty?

Possibly, if the HS still has duty and the C/O is valid under the applicable FTA. If MFN is 0%, C/O mainly supports origin control.

Is Vietnamese sub-labelling required?

Yes, when goods are circulated in Viet Nam and the original label lacks mandatory Vietnamese information.

What if invoice model differs from catalogue?

Ask the supplier to correct documents or provide model mapping confirmation before customs declaration and licensing.

IMPLEMENTATION SUPPORT FROM TGIMEX

This article provides a map of HS, duties, dossier and specialised policy for key management devices. In practice, each shipment must still be checked against catalogue, datasheet, model, documents, origin, cryptographic features and import purpose.

Execution capability

Agent network in more than 60 countries.
Member of WCA, WCA China Global, VLA and HNLA.
Sea, air, road/rail freight capability.
Customs clearance, C/O, import licence, warehousing and domestic delivery capability.

Support scope

Pre-ETA review: HS, MMDS, C/O, tax, labelling, catalogue/datasheet/model.
Compliance dossier control: Invoice, Packing List, B/L/AWB, C/O, licence, labels and technical documents.
International freight coordination, ETA tracking, pre-alert and transport documents.
Customs declaration, lane handling and explanation of HS, value, origin and specialised policy.

For shipments that may involve specialised inspection, licence, C/O or labelling requirements, enterprises should not wait until cargo arrival to start dossier review. Minor discrepancies may lead to additional document requests, clearance delay or unplanned storage costs.

TGIMEX supports enterprises in setting up an E2E import plan: pre-ETA policy review, document control, international freight coordination, customs declaration, clearance handling, domestic delivery and post-clearance file retention.

Có liên quan

QUICK CONSULTATION

NEED TO REVIEW IMPORT PROCEDURES OR A SHIPPING PLAN?

Send us the product name, shipping route, current dossier, or implementation request in advance so we can suggest a suitable approach that is practical, focused, and aligned with your shipment.

CALL NOW

HOTLINE 0963 856 664 / 0982 135 393

EMAIL info@tgimex.com

SUITABLE FOR International shipping · Customs procedures · Import licenses · B2B logistics

ELECTRICAL – ELECTRONICS – IT EQUIPMENT

F&B

MACHINERY

HOUSEHOLD GOODS

COSMETICS – PERSONAL CARE