Tiếng Việt
中文 (中国)
Import Procedures for Key Management Device
Key management device refers to hardware or appliance used to generate, manage, store, protect or distribute cryptographic keys, commonly seen as HSM (Hardware Security Module), KMS appliance, key vault, PKI/KMIP key server or a dedicated cryptographic key-management appliance. If the product is declared only as “server”, “security appliance” or “crypto box”, the shipment may face HS misclassification, missing civil cryptography licence, model inconsistency between Invoice – Packing List – catalogue – licence, additional dossier requests and DEM/DET exposure.
QUICK FACT
| Review item | Guidance for key management device | What to close before ETA |
|---|---|---|
| Product scope | Hardware/appliance used to generate, manage, store, protect or distribute cryptographic keys. | Do not automatically apply this article to encryption modules or crypto appliances with different model/function. |
| Reference HS Code | 8471.30.90 / 8471.41.90 / 8471.49.90 / 8471.80.90 should be reviewed where the device is an automatic data processing unit with key-management function. 8517.62.* is only for review where the main nature is network data transmission/reception/conversion. | Close classification based on catalogue, datasheet, CPU/storage, network ports, HSM/KMS/KMIP/PKI features and commercial description. |
| Import duty | Many 8471/8517 lines commonly show MFN reference duty of 0%; ordinary and special preferential duty must be checked by the actual HS at declaration date. | Do not lock duty without tariff and C/O verification. |
| VAT | May be 8% or 10% depending on declaration date and the exclusion appendix of the VAT reduction policy. | Do not self-apply 8% if the goods fall into excluded groups. |
| Specialised policy | Main focus is civil cryptography. If the device also has cybersecurity, wireless, Wi-Fi/4G/5G, battery, adapter or other module, review the corresponding policy separately. | Review licence features, algorithms, key-generation/storage/management function and conformity documents if any. |
| Key dossier | Invoice, Packing List, B/L/AWB, C/O if any, catalogue/datasheet, model list, user manual, cryptographic specification, MMDS licence/conformity dossier if applicable. | Product name, model, serial, HS, quantity, origin and technical characteristics must match across documents, licence and declaration. |
Legal note: Under Decree 211/2025/ND-CP, the list of civil cryptography products subject to export/import licence applies only when the HS code, goods description and cryptographic technical characteristics match the list. Therefore, a key management device must be reviewed by catalogue, datasheet, model, import purpose and actual cryptographic characteristics before concluding the policy.
SCOPE OF APPLICATION
This article applies only to key management device in hardware/appliance form used in cryptographic, PKI, KMS, HSM, KMIP or enterprise key-management infrastructure.
- Not automatically applicable to the whole group “Encryption Device/Module; Key Management Device; Crypto Appliance”.
- New, used, refurbished, sample, warranty/RMA or project cargo may trigger different policies.
- If the device includes network modules, Wi-Fi/Bluetooth/4G/5G, battery, adapter, software licence, VPN or IP-flow encryption, each component must be reviewed separately.
- Review must be based on actual catalogue, datasheet, model and import purpose.
CLASSIFICATION & TECHNICAL IDENTIFICATION
Technical identification
A key management device may generate, store, distribute or protect keys; manage digital certificates; integrate PKI/KMIP; or operate as an HSM, rackmount appliance or module embedded in a larger system.
Risk of wrong description
Generic descriptions such as “server”, “IT equipment” or “security appliance” may trigger requests to clarify cryptographic nature, HS, MMDS licensing, conformity and model consistency.
| Checkpoint | Documents to compare | Risk if misdescribed | Suggested customs/commercial description |
|---|---|---|---|
| Main function | Catalogue, datasheet, user manual | Wrong HS or specialised policy | Cryptographic key management device, model…, used to generate/store/manage cryptographic keys |
| Cryptographic characteristics | Encryption/key-management specification, FIPS/CC if any | Missing MMDS licence or conformity dossier | State HSM/KMS/KMIP/PKI function, algorithm and use scope |
| Hardware configuration | CPU, RAM, storage, ports, modules | Confused with ordinary server or network device | Describe dedicated appliance and included accessories |
| Model/serial | Model list, serial list, original label | Licence does not match declaration or actual goods | Keep exact model characters as published by manufacturer |
| Accessories/power supply | Packing list, datasheet, goods photos | Missing adapter, battery, wireless module or licence | List accessories if imported as a set |
HS CODE – DUTY – C/O
HS Code depends on the technical nature: automatic data processing unit, dedicated module/appliance, or network device with key-management function. The commercial name alone is not sufficient.
| Reference HS Code | Condition for use | Risk if incorrect | Documents to compare |
|---|---|---|---|
| 8471.30.90 / 8471.41.90 / 8471.49.90 | Where the goods are automatic data processing machines/units with key-management function. | Reclassification if the main nature is network communication or other electrical apparatus. | Catalogue, datasheet, configuration, label photo. |
| 8471.80.90 | Other units of automatic data processing machines; review where the device is a dedicated unit of an IT system. | Wrong HS and MMDS list if Appendix requires matching HS. | Technical dossier, system diagram, model list. |
| 8517.62.* | Only where the main nature is network data transmission/reception/conversion with encryption/key-management feature. | Misuse of network group for a dedicated key-management device. | Network port datasheet, routing/switching/encryption features. |
| Other HS if technical nature differs | Where catalogue shows a specialised nature not covered above. | Insufficient basis for customs classification. | Technical dossier and classification opinion if needed. |
| Tax/VAT item | Reference guidance | Application note |
|---|---|---|
| Ordinary import duty | Check by actual HS and tariff at declaration date. | Not a substitute for official classification. |
| MFN duty | Many 8471/8517 lines commonly have 0% MFN reference duty; verify by 8-digit HS. | Duty may change if another HS applies. |
| VAT | 8% or 10% depending on declaration date and VAT reduction exclusions. | Do not self-apply 8% without checking exclusions. |
| Special preferential duty with C/O | May be 0% if C/O is valid under the relevant FTA. | If MFN is already 0%, C/O mainly supports origin control. |
C/O may be rejected if form, origin criterion, goods description or HS Code does not match Invoice/B/L/customs declaration. Draft C/O should be reviewed before issuing the original.
APPLICABLE SPECIALISED POLICY
| Goods scenario | Possible policy | Documents to check | Authority/portal if identifiable | When to handle | Risk note |
|---|---|---|---|---|---|
| Device generates/stores/manages cryptographic keys | Civil cryptography import licence; conformity assessment/declaration if applicable. | Catalogue, datasheet, cryptographic specification, conformity certificate if any. | Government Cipher Committee / Civil Cryptography Management authority. | Before ETA, preferably before shipment. | Do not wait until cargo arrival. |
| Device also qualifies as cybersecurity product | Additional cybersecurity import licence may apply if it falls under the list. | Security features, licence feature, ATTTM list. | MIC/AIS if applicable. | Before ETA. | MMDS and ATTTM licences are separate policy layers. |
| Wireless module included | ICT conformity/quality inspection may arise. | Module datasheet, frequency, power, test report. | MIC/VNTA/service portal if applicable. | Before ETA or pre-clearance depending on policy. | Accessory module can change policy. |
| Battery/adapter included | Electrical safety, labelling and battery transport review. | Packing list, power adapter datasheet, battery MSDS if any. | Relevant specialised authority if applicable. | Before booking transport. | Lithium battery may affect air/sea transport. |
| Used/refurbished goods | Used equipment policy or other restrictions may apply. | Year of manufacture, condition, contract, manufacturer confirmation. | Customs/specialised authority by case. | Before purchase/shipment. | Do not treat as new goods. |
| EPE/FDI/factory import | Customs purpose, import right and post-clearance retention. | Contract, PO, use purpose, project dossier. | Local customs authority if applicable. | Before ETA. | Licence review still applies if MMDS. |
LEGAL DOCUMENTS TO REVIEW
| Document group | Name/number | Issuer | Effective date/application time | Role in procedure | Key articles/appendices | Review note |
|---|---|---|---|---|---|---|
| Law | Law on Cyberinformation Security 2015 | National Assembly | Check current validity before use | Framework for civil cryptography and cybersecurity. | Civil cryptography provisions. | Use the latest consolidated status. |
| Decree | Decree 211/2025/ND-CP | Government | Effective 09/09/2025 | Civil cryptography activities, product list and import/export licence. | Articles 3, 4, 7; Appendix II for import/export licensing; Appendix I when reviewing business/conformity requirements; Forms 07/08 if applicable. | Core document for key management device. |
| Circular | Circular 10/2022/TT-BTTTT amending Circular 13/2018/TT-BTTTT | MIC | Effective 15/09/2022 | Review if the device also falls under cybersecurity import licence list. | Cybersecurity product list/dossier if applicable. | Does not replace MMDS licence. |
| Decree | Decree 43/2017/ND-CP and Decree 111/2021/ND-CP | Government | 01/06/2017 and 15/02/2022 | Goods labelling and Vietnamese sub-labels. | Label content, origin, responsible entity. | Check original label before ETA. |
| Tariff | Decree 26/2023/ND-CP and Decree 199/2025/ND-CP | Government | 15/07/2023 and 08/07/2025 | MFN tariff and amendments. | Tariff appendices by actual HS. | Check at declaration date. |
| VAT | Resolution 204/2025/QH15; Decree 174/2025/ND-CP; Decree 181/2025/ND-CP; Decree 359/2025/ND-CP; Decree 144/2026/ND-CP | National Assembly/Government | 204/2025 and 174/2025 effective 01/07/2025; 181/2025 effective 01/07/2025; 359/2025 effective 01/01/2026; 144/2026 effective 20/06/2026 | VAT reduction policy, VAT Law implementing guidance and relevant amendments. | Exclusion appendix, declaration date, actual product description/HS. | Do not self-apply 8%; check the VAT rules effective on the declaration date. |
VIEW / DOWNLOAD ORIGINAL LEGAL TEXTS
Enterprises should additionally verify the documents on the official legal document portal or issuer websites before application.
CUSTOMS DOSSIER
Commercial documents
- Commercial Invoice.
- Packing List.
- Bill of Lading/Air Waybill.
- Sales Contract/Purchase Order if any.
- C/O if preferential duty is claimed.
- Catalogue, datasheet, user manual, model/serial list.
Specialised documents if applicable
- Civil cryptography product import licence.
- Conformity certificate/declaration if applicable.
- Cryptographic specification, algorithm and key-management documents.
- Test report/technical certificate if any.
- Labelling dossier and original label photos.
| Dossier group | Required document | Used for | Usually prepared by | Common error | Pre-ETA check |
|---|---|---|---|---|---|
| Commercial | Invoice, Packing List, Contract/PO | Declaration, value, payment | Importer, shipper, purchasing | Generic goods name, missing model/serial | Cross-check with catalogue and label. |
| Transport | B/L/AWB, arrival notice, pre-alert | Delivery order, declaration, ETA tracking | Forwarder, agent, shipper | Wrong consignee/package/description | Verify before arrival. |
| Technical | Catalogue, datasheet, user manual, model list | HS, policy, licence | Manufacturer/supplier, IT team | Missing cryptographic characteristics | Request official documents by model. |
| MMDS | Import licence, conformity certificate if any | Clearance and post-clearance retention | Compliance, importer, service provider | Licence mismatch with model/HS/quantity | Lock model list before licence submission. |
| C/O | Draft/original C/O, invoice, B/L | Preferential duty, origin control | Shipper, exporter, importer | Wrong form, HS or description | Review draft C/O before original issuance. |
Mandatory rule: goods name, quantity, model, serial, origin, technical specifications and cryptographic characteristics must match across commercial documents, catalogue, labels, specialised licence and customs declaration.
DECISION POINTS THAT MAY HOLD THE SHIPMENT
| Decision point | Question to answer | Evidence | Consequence if unclear | Recommended action |
|---|---|---|---|---|
| HS Code | Is the device an ADP unit, network device or other specialised apparatus? | Catalogue, datasheet, function diagram | Reclassification, duty/policy change | Close HS before ETA. |
| MMDS | Does the model generate, store, manage or protect cryptographic keys? | Key specification, user manual | Missing MMDS import licence | Review Appendices of Decree 211/2025/ND-CP. |
| Conformity | Is conformity certification/declaration required? | Certificate, test report if any | Insufficient licence/clearance dossier | Determine before filing licence dossier. |
| Model/serial | Do documents match catalogue, label and licence? | Model list, serial list, label photos | Goods may be treated as different from licence | Keep exact manufacturer model. |
| C/O | Is C/O correct in form, criterion, HS and description? | C/O, invoice, B/L, origin rule | Preferential duty rejected | Review draft C/O before shipment. |
| Goods condition | New, refurbished, warranty or sample? | Invoice, RMA, manufacturer confirmation | Different policy may apply | State condition and import purpose clearly. |
E2E OPERATIONAL PROCESS
Step 1: Pre-ETA review
Close HS, MMDS policy, VAT, C/O, labelling and goods condition; determine whether an MMDS import licence is required.
Step 2: Lock technical documents
Finalize Invoice, Packing List, B/L/AWB, catalogue, datasheet, user manual, model/serial list and cryptographic specification.
Step 3: Handle specialised licence
Submit MMDS licence/conformity dossier if applicable; do not wait until cargo arrival.
Step 4: Customs declaration
Green lane: conditional system clearance; Yellow lane: document check; Red lane: document and physical inspection.
Step 5: Clearance and delivery
Complete duty/VAT, release cargo, arrange delivery and control labels/specialised dossier if applicable.
Step 6: Post-clearance file retention
Retain licence, C/O, catalogue, conformity documents, HS/policy explanation and transport documents by shipment.
PRE-ETA RISK CHECKLIST
| Risk | Impact | How to block before ETA | Documents to review |
|---|---|---|---|
| Generic product name | Wrong HS/policy and explanation request | Standardize name by cryptographic key-management function | Invoice, PL, catalogue, datasheet |
| Missing MMDS licence | Cargo hold, storage charges, project delay | Review Decree 211/2025/ND-CP before shipment | Datasheet, cryptographic specification, model list |
| Licence mismatch | Not eligible for clearance or dossier amendment | Lock model list before licence filing | Licence, invoice, packing list |
| Missing conformity/technical certificate | Incomplete licence or circulation dossier | Determine conformity requirement early | Test report, certificate, standards |
| Incorrect C/O | Preferential duty denied or C/O amendment required | Review draft C/O before original issuance | C/O draft, invoice, B/L |
| VAT not reviewed by declaration date | Wrong tax declaration | Check VAT policy and exclusion appendix | Tariff, VAT documents, draft declaration |
FAQ
Does a key management device require an import licence?
Possibly yes, if HS code, goods description and cryptographic characteristics match the list under Decree 211/2025/ND-CP. Review by actual model.
Is conformity certification required?
It may arise if the product is subject to conformity assessment/declaration for civil cryptography products. Do not conclude without datasheet and technical dossier.
Is a normal server with KMS software treated the same?
Not automatically. If it is merely a general-purpose server without dedicated cryptographic hardware/function, policy may differ.
Can C/O reduce duty?
Possibly, if the HS still has duty and the C/O is valid under the applicable FTA. If MFN is 0%, C/O mainly supports origin control.
Is Vietnamese sub-labelling required?
Yes, when goods are circulated in Viet Nam and the original label lacks mandatory Vietnamese information.
What if invoice model differs from catalogue?
Ask the supplier to correct documents or provide model mapping confirmation before customs declaration and licensing.
NEED TO REVIEW IMPORT PROCEDURES OR A SHIPPING PLAN?
Send us the product name, shipping route, current dossier, or implementation request in advance so we can suggest a suitable approach that is practical, focused, and aligned with your shipment.
Cargo Damage at a Port or Warehouse: An Immediate Response Checklist
What Is General Average? How Cargo Interests Should Respond to a GA Notice
When should businesses photograph or video container stuffing and opening?
When Can Cargo Insurers Reject or Reduce a Claim?
Risks of Failing to Inspect a Container Before Cargo Stuffing
Risks of Failing to Inspect a Container Before Cargo Stuffing
What Documents Are Required for a Cargo Insurance Claim?
What Information Should a Cargo Damage Survey Record Contain?
Total Loss vs Partial Loss in Cargo Insurance: What Is the Difference?
Cargo Dented, Wet or Missing Packages: What Should a Business Do?
Who Must Arrange Insurance under CIF and CIP?
Export Process: From Purchase Order to Final Document Set
How Is Cargo Insurance Value Determined?
How Do ICC-A, ICC-B and ICC-C Cargo Insurance Conditions Differ?
When Should a Business Buy Separate Cargo Insurance?