Certification

A P LEX ADILLA |SECRETARY OF STATE | STATE OF CALIFORNIA OFFICE OF VOTING SYSTEMS TECHNOLOGY ASSESSMENT 1500 11th Street | Sacramento, CA 95814 | Tel 916.695-1680 | Fax 916.653.4620 | www.sos.ca.gov October 20, 2020 Timothy Vlach Tenex Software Solutions, Incorporated 5402 W. Laurel St, Suite 206 Tampa, Florida 33607 Dear Mr. Vlach: The California Secretary of State’s Office of Voting Systems Technology Assessment received a request for administrative approval, pursuant to California Code of Regulations (CCR) section 20159, to apply modifications to the certified Tenex Precinct Central 4.2 electronic poll book system. CCR section 20159 provides that any change or modification to a certified electronic poll book system must be examined for conformance by the Secretary of State. The Tenex administrative approval request contains two (2) modifications. The modifications are as follows: Type Description New Feature Added iPad 8th Generation, 32 Gigabyte New Feature Added iOS 14.0 Tenex submitted the following document from Pro V&V, an Election Assistance Commission certified Voting System Testing Laboratory, supporting the modifications identified above: • Certification Test Report for Examination of Electronic Poll Book - Tenex Software Solutions Precinct Central iPad 8th Gen Addition-Modification to State of California Requirements In addition, Tenex addressed the following four (4) discrepancies that were identified during testing of the Precinct Central 4.2 electronic poll book system: Discrepancy Vendor Mitigation Strict Transport Security Not Enforced Tenex disabled the http binding in the web server. SSL Medium Strength Cipher Suites Supported Tenex removed the IIS and Windows server registry settings ( SWEET32) supporting the medium strength ciphers. Remote Host Supports the Use of the Flawed Tenex disabled the http binding in the web server. RC4 Cypher in One or More Cipher Suites Remote Service Accepts Connections Encrypted Tenex deprecated and removed legacy support for TLS 1.0. Using the Flawed TLS 1.0 Protocol Detection SLI Compliance, an Election Assistance Commission certified Voting System Testing Laboratory, confirmed mitigation of the discrepancies identified above. October 20, 2020 Page 2 Based on the testing conducted by Pro V&V and SLI Compliance, administrative approval is granted. The system was modified, and thus warrants a version number change. As such, the Precinct Central 4.2 system certified on October 3, 2020, with the above described modifications, is now version number 4.3. All conditions of the Precinct Central 4.0 electronic poll book system approval dated May 22, 2018, the Precinct Central 4.1 electronic poll book system approval dated December 16, 2019, and the Precinct Central 4.2 electronic poll book system approval dated October 3, 2020, remain in effect. Sincerely, Susan Lapsley Deputy Secretary of State, HAVA and Counsel