How do I certify my solution?
The subject of getting your solution certified probably deserves a whole book on its own. There are so many different types of certifications for different industry and government standards. That said, for our security focus I have chosen to distill this into the holy grail of certifications: the coveted FIPS 140-3 certification with NIST.
Not to discourage or dissuade you, but I must mention that several companies have built a business model to help other businesses navigate this painstaking and lengthy process with the labs and NIST. You can easily find them online with a simple Google search when looking for FIPS certification. Their services will most likely show at the top of all results.
FIPS 140-3 certification is not just a software certification, but a software on specified hardware validation. The testing labs that provide these services to the process use a specific hardware platform for each testing cycle. Which platform that is may vary...
