Admin Approval

July 31, 2025 Ashley Raja Tenex Software Solutions, Inc. 5021 W. Laurel Street Tampa, Florida 33607 Dear Ms. Raja: On Tuesday, July 16, 2024, the California Secretary of State Office of Voting Systems Technology Assessment received a request for administrative approval, pursuant to California Code of Regulations (CCR) Title 2, Division 7, Chapter 3.6, section 20159, to apply modifications to the certified Tenex Precinct Central v6.0.1 electronic poll book system. CCR Title 2, Division 7, Chapter 3.6, section 20159 provides that any change or modification to a certified electronic poll book system must be examined for conformance by the Secretary of State. The Tenex administrative approval request contained twenty-eight (28) modifications. The modifications are as follows: Type Description Update Updated the Precinct Central Touchpad application to version 6.1.2 Update Updated the Precinct Central Console website to version 24-02 Update Included iOS 18.3.1 Updated the Election Day Registration Totals filter to show only new voters in Check- Update Ins List view New Feature Added a Vote Type filter option in the Check-Ins pages New Feature Updated the All Clock-in Report to export totals across multiple days Update Added a parameter to control the Home page refresh rate Update Added a time stamp to the logs alongside the date Added a column sort by ascending or descending values functionality in the grid for Update the Journal File Logs page Update Optimized the Ballot Inventory page speed New Feature Added bulk edit functionality for Over the Air notification status New Feature Enabled Device Detail View via the asset ID Update Adjusted the New Voters Total query Resolved an anomaly where the Package Selection filter was resetting when a user Update clicked between the Home and Touchpad page in Console Update Set the Over the Air page auto-refresh off by default during edits Updated the Verify Statistics Report to show Choose instead of No Ballot Style for Update Primary Elections Update Added Stub Number to the Transactions tab in Voter Record Update Added Voter's Selected/Declared Party in transaction information New Feature Improved user experience when adding voter comments New Feature Added a Voter Search by Comment field New Feature Voter changes made via Console now appear in transactions record timeline July 31, 2025 Page | 3 Update Updated the Training Voter Record user interface Update Added the ability to export signatures for provisional check-ins in TIFF format Update Added the Journal File column to show delta file change source Update Added logic to Summary Report to report unique IDs per voter status Update Improved the Check-In Time column sorting Update Added the Status column to the Missing Signatures grid on the Data Verification page Update Added the ability to save poll workers not assigned to a voting location The Secretary of State staff performed functional testing on the modified Tenex Touchpad system from August 8-9, 2024. In addition, regression testing was performed on February 24-25, 2025, and May 12-14, 2025. Examination of this system was conducted by the State’s technical consultant SLI Compliance with oversight by the Secretary of State Staff. Function Testing, Regression Testing, Source Code Review, Accessibility Review, and Security and Telecommunications Testing were performed by SLI Compliance from August 6, 2024, to May 9, 2025. The following nine (9) discrepancies were identified during Source Code Review, Accessibility Review, and Security and Telecommunications Testing: Discrepancy Vendor Mitigation/Response Upon review, no passwords were present in the code, A variable name resembling 'SHApassword' and no sensitive information was exposed or stored. was flagged during static analysis. However, Tenex is committed to resolving this issue in the next version of the system. The Epson TM-M30 printer includes unsecured Tenex will disable all unused ports using the physical ports. When connected to a network, it administrative interface for all elections deployed provides its dynamically assigned IP address. printers. Tenex will also update the default The printer also uses manufacturer default passwords for the printers. credentials. The Epson TM-P80 printer includes an Tenex will disable all unused ports using the unsecured physical port that can be used to administrative interface for all elections deployed access the printer. printers. The Epson TM-L90 wireless printer includes Tenex will disable all unused ports using the unsecured physical ports. When connected to a administrative interface for all elections deployed network, it provides its dynamically assigned IP printers. Tenex will also update the default address. The printer also uses manufacturer passwords for the printers. default credentials. The Epson TM-L100 wireless printer includes Tenex will disable all unused ports using the unsecured physical ports. When connected to a administrative interface for all elections deployed network, it provides its dynamically assigned IP printers. Tenex will also update the default address. The printer also uses manufacturer passwords for the printers. default credentials. Section 508 § 1194.25(c) Where a product utilizes touchscreens or contact-sensitive Tenex will provide iOS keyboards to meet this controls, an input method shall be provided that requirement. complies with §1194.23 (k) (1) through (4). Section 508 § 1194.26 (b) If a product utilizes touchscreens or touch-operated controls, an Tenex will provide iOS keyboards to meet this input method shall be provided that complies requirement. with §1194.23 (k) (1) through (4). July 31, 2025 Page | 4 Section 508 § 1194.31 (a) At least one mode of operation and information retrieval that does not Tenex will provide jurisdictions with instructions on require user vision shall be provided, or support how to enable and use the built-in iOS screen reader, for assistive technology used by people who are VoiceOver. blind or visually impaired shall be provided. Section 508 § 1194.31 (b) At least one mode of operation and information retrieval that does not require visual acuity greater than 20/70 shall be Tenex will provide jurisdictions with instructions on provided in audio and enlarged print output how to enable and use the built-in iOS screen reader, working together or independently, or support VoiceOver. for assistive technology used by people who are visually impaired shall be provided. Based on testing conducted by the Secretary of State staff and SLI Compliance, administrative approval is granted with the following additional condition: 1) By January 1, 2026, Tenex will address the discrepancies as noted in the table and provide written notice to the Secretary of State indicating that the mitigations have been implemented and are ready for verification. The system has been modified and thus warrants a version number change. With the above-described modifications, the version number is 6.1.2. Based on the application, testing conducted by the Secretary of State staff, and additional supporting documentation from SLI Compliance, this administrative approval is granted. All other conditions of the Tenex Precinct Central v6.0.1 approval, dated January 31, 2024, remain in effect. Sincerely, Rodney Rodriguez Information Technology Supervisor II, OVSTA