Certification

A P LEX ADILLA |SECRETARY OF STATE | STATE OF CALIFORNIA OFFICE OF VOTING SYSTEMS TECHNOLOGY ASSESSMENT 1500 11th Street | Sacramento, CA 95814 | Tel 916.695-1680 | Fax 916.653.4620 | www.sos.ca.gov October 3, 2020 Timothy Vlach Tenex Software Solutions, Incorporated 5402 W. Laurel St, Suite 206 Tampa, Florida 33607 Dear Mr. Vlach: The California Secretary of State’s Office of Voting Systems Technology Assessment received a request for administrative approval, pursuant to California Code of Regulations (CCR) section 20159, to apply modifications to the certified Tenex Precinct Central 4.1 electronic poll book system. CCR section 20159 provides that any change or modification to a certified electronic poll book system must be examined for conformance by the Secretary of State. The Tenex administrative approval request contained eighty-nine (89) modifications. Thirty-four (34) modifications are not intended for use in California and are not to be deployed or utilized within California. Fifty-five (55) of the modifications are applicable to California and are as follows: Type Description Update Update to Precinct Central Touchpad Application v4.5.2.0 New Feature Added iOS 13.7 New Feature Added Voter Assistance Workflow Changes New Feature Added Provisional Voter Parameters New Feature Added Vote Type Parameters New Feature Added Additional Voter Check-in Functionality New Feature Added Additional Poll Worker Information Capture Functionality New Feature Added Support for New Languages New Feature Made Improvements to Delta File New Feature Added Push Notifications for Error Codes and Registration Updates New Feature Added Wait Time Barcode, and Wait Time Notification Functionality New Feature Added Epson Printer Configuration Functionality New Feature Added Early Voted and Already Voted Message Tags New Feature Added Ability to Customize Address Search, Ballot Accounting Complete, and Location Messages New Feature Added Display Time in Header, and Voter Check-in Totals in Footer New Feature Added Request Assistance Menu Item New Feature Added Log Reprint Capability New Feature Added Registration Now Prompts New Feature Added Final Sync Message New Feature Added Vote by Mail Replacement Workflow New Feature Added Ballot Return Workflow New Feature Added Close of Election Button New Feature Added Ballot Style Update During Party Change Capability New Feature Added Selected Date to Totals Printout New Feature Added Conditional Voter Registration Workflow New Feature Added Birth Year Format for Voter Update New Feature Added Ability to Save Updates for Absentee Voters New Feature Added Red Asterisk (*) to Indicate Required Entry Fields October 2, 2020 Mr. Vlach Page 2 New Feature Added Parameter on Issue Ballot Screen Forcing User to Select a Ballot Type New Feature Added Delete via Push Notification Functionality New Feature Added Parameter to Turn Off Ability to Reissue a Ballot from a Spoiled Ballot New Feature Added Warning Message for Final Ballot Allowed Under Spoiled Ballot Process New Feature Added Out of County Voter Workflow New Feature Made Ballot Style Labels, Font for Paper Oath, and Signature Message Boxes Customizable Fix Fixed Absentee Surrender for Provisionals Workflow Fix Fixed iPad to iPad Data Transmission Functionality Fix Fixed Voter Not Found Workflow Printing Inconsistency Fix Fixed Voter Assistance Workflow Not Selecting Ballot Type Fix Fixed Printed Fields Declared Printing Inconsistency Fix Fixed Oath Font Sizes on Voter Signature Screen Fix Fixed Assistance Requested and Address Update Flags Fix Made Assistant Signature Screen Match Voter Signature Screen Fix Added Voter Not Found/Search Again Button to Address Search Fix Fixed Voted String Not Appearing in Search Results When Scrolling Fix Fixed Voter Update Flag Remaining when Update Canceled Fix Fixed Invalid Address Not Tracking When Selecting Back During Ballot Assigning Step Fix Added Missing Information to Sideways and Central Server Voter Update Messages Fix Stopped Transmission of Voter Update History when Central Server OFF Fix Fixed Invalid Address Message for Address Changes During Non-Countywide Elections Fix Fixed Wrong Location Eligibility to Accept Regular Check-In Fix Fixed Update Voter Information Functionality for Wrong Location Provisional Voters Fix Fixed Manually Device Registration Functionality Fix Fixed Pop-Ups Auto Disabling Due to iOS Fix Fixed iPad to iPad Connectivity Information Inconsistency Fix Fixed Instant Messaging Not Auto Refreshing Examination of this system was conducted by the State’s technical consultant SLI Compliance with oversight by Secretary of State Staff. Regression Testing, Volume Testing, Source Code Review, and Security and Telecommunications Testing were performed by SLI Compliance from August 6 to September 23, 2020. The following four (4) discrepancies were identified during testing: Discrepancy Vendor Mitigation/Response Tenex will disable the http binding in the web server to avoid any Strict transport security not enforced. possibility of a mistake by October 15, 2020. SSL Medium Strength Cipher Suites Tenex will remove the IIS and Windows server registry settings S upported (SWEET32) supporting the medium strength ciphers by October 15, 2020. Remote host supports the use of the flawed Tenex will disable the http binding in the web server to avoid any RC4 cypher in one or more cipher suites. possibility of a mistake by October 15, 2020. Remote service accepts connections encrypted Tenex will deprecate and remove legacy support for TLS 1.0 by using the flawed TLS 1.0 Protocol Detection. October 15th, 2020. Based on the testing conducted by SLI Compliance, administrative approval is granted with the following additional conditions: 1) By October 15, 2020, Tenex will address the discrepancies as noted in the table and provide written notice to the Secretary of State indicating that the mitigations have been implemented and are ready for verification. October 2, 2020 Mr. Vlach Page 2 2) Jurisdictions utilizing an electronic poll book, in any election, shall create and have on file an emergency preparedness plan that outlines the processes and procedures to be followed by county officials and poll workers in the event of a failure of one or more of the electronic poll books. A copy of that plan shall be submitted to the Secretary of State no later than seven (7) days prior to its use in that election. 3) Tenex and/or jurisdictions using the electronic poll book system shall perform a complete Logic & Accuracy (L&A) testing of the end-to-end Precinct Central system prior to deploying the devices. This is to include but is not limited to election logic, applicable integration, all Precinct Central devices, and all peripherals. 4) Tenex and/or jurisdictions using the electronic poll book system shall perform testing of the designated connectivity solution at each voting location prior to deploying the devices to ensure adequate connection and capacity is present to support the intended function of the Precinct Central system. The system was modified, and thus warrants a version number change. As such, the Precinct Central 4.1 system certified on December 16, 2019, with the above described modifications, is now version number 4.2. All conditions of the Precinct Central 4.0 electronic poll book system approval dated May 22, 2018, and the Precinct Central 4.1 electronic poll book system approval dated December 16, 2019, remain in effect. Sincerely, Susan Lapsley Deputy Secretary of State, HAVA and Counsel