Military Appreciation Month 2023: Vote in Honor of a Veteran
Vote in Honor of a Veteran Program
Vote in Honor of a Veteran Program
ClearVote 2.3 / Dell PowerEdge Server R440
This ECO documents a minor change order request to ClearVote 2.3. The Dell R440 Server certified under this system has come to its end of production life, and CBG is seeking the EAC’s approval for a de minimis upgrade to the newer generation Dell R450 Server. Clear Ballot Group requests de minimis engineering change order (ECO) approval to add alternate component for CBG clients affected in the following states: KS,OH,OR,PA,WA, and WI. CBG is requesting the Dell R450 Server be certified for use with the ClearVote 2.3 version release as a Design Server and/or as a Count Server (formerly known as ScanServer). This change affects the following certified systems: EAC - ClearVote 2.3
Current Model: Dell R440
Replacement Model: Dell R450
VSTL Accreditation Status
The intent of section 3.8 in the Voting System Test Laboratory Manual, version 2.0 is to make clear that the VSTL accreditation is subject to reassessment by NVLAP and the EAC with a period of approximately two years, at the discretion of the EAC. It is not intended to describe the EAC VSTL accreditation revocation process, which is described in chapter 5 of the Voting System Test Laboratory Manual, version 2.0.
Software De Minimis Changed
The EAC has determined that allowing software de minimis changes is necessary to confront a rapidly evolving cybersecurity threat environment as well as allowing Manufacturers to quickly respond to changing jurisdictional requirements, where those requirements can be addressed with minor changes.
New System Designation
The EAC will use each manufacturer's quality assurance system and its internal procedures for controlling changes to, and versions of, it's voting systems when determining when a voting system is a "new" system.
Test Case Upload
Tight project schedules and other realities of voting system testing and certification have generally made manufacturers choose to move forward with “at risk” testing performed well before test plan approval. This reality conflicts with the requirement that the VSTL inform the EAC in writing once test cases have been completed. The EAC has generally not seen test cases until after test plan approval, even for "at risk" testing that may have occurred much earlier. In order to remedy this situation and to allow the EAC to more productively and appropriately comment on test cases before they have been run, the following clarification is noted: require the VSTLs to notify the EAC in writing and to upload test cases to the VRT when requested by the EAC before any tests have been run using the particular test case or test cases. This process will allow EAC to review test cases proximate to when they will be run and will hopefully eliminate any issues arising from after-the-fact test case review that might cause meaningful and potentially harmful delays in the testing and ultimate certification of the voting system