The DoD UC APL certification process is the responsibility of the Defense Information Systems Agency (DISA) Unified Capabilities Certification Office (UCCO). Certifications are performed by approved distributed testing centers including the Joint Interoperability Test Command (JITC) at Ft. Huachuca outside of Sierra Vista, Arizona, USA.

DoD customers can only purchase unified capabilities related equipment, both hardware and software, that has been certified. Certified equipment is listed on the US Department of Defense (DoD) Unified Capabilities Approved Product List (APL). UC APL certifications verify the system complies with and is configured consistent with the DISA Field Security Office (FSO) Security Technical Implementation Guides (STIG).

UC APL certifications testing consist of two test sections, Interoperability (IO) and Information Assurance (IA) testing. The IO testing ensures that the product meets the requirements as detailed in the UCR test plan, and that the system is able to interoperate with other vendors. The IA section of the test verifies the system complies with and is configured consistent with the DISA Field Security Office (FSO) Security Technical Implementation Guides (STIG). STIG requirements include proper user privilege assignment and restrictions, password policies (complex passwords, proper treatment of inactive accounts, password expiration, password reuse, account lockout, etc.), proper file protections, and auditing and logging capabilities. Only after successful completion of both IO and IA testing is a product placed on the Approved Products List (APL). Configuration Guides available upon request.

For more information about the UC APL process visit the UCCO Website.