Source-linked configuration dossier

Clear Ballot ClearVote 2.5 / ClearAccess

A source-linked dossier for the ClearAccess ballot-marking configuration within EAC-certified ClearVote 2.5, including named COTS components, explicit external UPS options, certified software observations, and Pro V&V test findings.

Federal certificate CBG-CV-25VVSG 1.0VSTL: Pro V&V, Inc.Editorial: published r5

Components9all source-linked

Hardware facts82 explicit unknowns

Change records3field status kept separate

Findings/statuses4version-scoped

Archived sources8local hash verified

Do not collapse evidence scopes.

A certified component list does not prove what a jurisdiction installed. A jurisdiction system-version listing does not prove device firmware, configuration-change adoption, internal parts, or power topology.

Selectable schematic

Orthographic component explorer

Use the accessible component list as the source of truth. The optional 3D view mirrors that selection.

Components9 records

illustrative not to scale

Reference: Portrait Elo ClearAccess product-photo configuration with accessible keypad and headphones; printer and external UPS shown as certified alternative categories

2D evidence view is active

Open the lightweight local 3D schematic when useful. It is opt-in on every screen size.

certified configuration

certified component

ClearAccess software

The certified scope lists proprietary ClearAccess software version 2.5.6 and its configured COTS software environment.

EAC-certified ClearAccess software: 2.5.6

Certified COTS operating-system environment: Windows 10 IoT Enterprise LTSC 2021

Linked configuration changes: SW-10275, SW-10691, TR-DEF-556

Linked findings: ClearAccess 2.5.5 write-in controls were undersized; OpenSSL libraries updated in the submitted modification set

These are versions in the certified configuration, not a live reading from a deployed workstation and not a claim that 2.5.6 is the newest product-family release.

Sources for this selection

ClearVote 2.5 Certificate and Scope of Conformance U.S. Election Assistance Commission
ClearVote 2.5 Certification Test Plan, Version 01 Pro V&V, Inc.
ClearVote 2.5 Certification Test Report, Revision 03 Pro V&V, Inc.

Network configuration evidence

Documented paths, controls, and unknowns

Expected, documented, and observed configurations remain separate. Physical port capability is not treated as an active connection.

Safe public evidence boundaryReviewed 2026-07-21

The reviewed ClearVote 2.5 record identifies the ClearAccess station and its local peripherals, while Clear Ballot's current security policy says certified products are never attached to modems, the Internet, Wi-Fi, or Bluetooth. The exact port occupation and field wiring of a particular station are not established.

This public view records device roles, connection media, evidence scope, and isolation controls. It intentionally excludes IP addresses, credentials, keys, access codes, APNs, SIM identifiers, serial numbers, and site-specific routing details.

1 sourced configuration view1 source imageNo field-observed topology collected

expected layercertified configurationdocumented partial

Certified station boundary and local peripherals

ClearAccess is represented as a touchscreen ballot-marking station with a ballot printer and accessibility inputs. The reviewed sources support local peripheral relationships and a product-level communications boundary, not a field-observed network.

Topologystandalone local peripherals

Select a nodeHighlights its documented paths

ClearAccess stationBallot printer

Local wired peripheral connection

Print the voter-reviewed paper ballot - documented partial

Accessibility inputsClearAccess station

Local assistive-device connection

Provide accessible navigation and selection input - documented partial

documentedManufacturer communications boundary

Clear Ballot states that certified products are never attached to modems, the Internet, Wi-Fi, or Bluetooth.

not publicly establishedField port state

The exact enabled interfaces, occupied connectors, and jurisdiction cabling were not established by the reviewed public record.

Operational details withheld

No addresses, credentials, cryptographic material, access codes, or site-specific configuration values are collected or displayed.

A product-level communications policy and a certified component list do not prove the state of a particular port, cable, station, polling place, or election deployment.

Clear Ballot Group: Protecting Elections: Security U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance

Source diagrams and pagesExpand any image; scope and caveats stay attached.

source topology diagramClearVote 2.5 system components and component-relationship diagrams

The suite-level diagram shows product and data relationships. It is not a cable map and does not establish that ClearAccess is attached to a network in a field deployment.

EAC scope PDF page 8, document page 6

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance

Evidence gapsUnknowns stay explicit and source-bounded.

Not established

Exact port and cable map

The reviewed ClearVote 2.5 public certification attachments do not provide an installation-specific ClearAccess port-occupation or cable-routing record.

This is a public-evidence gap, not evidence that an undocumented connection exists.

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance

Not established

Field-observed configuration

No dated, unit-level or polling-place network inspection was collected for this dossier.

Certified and manufacturer evidence must not be presented as a live observation.

Clear Ballot Group: Protecting Elections: Security U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance

Version evidence

Last sourced observations

“Last” means latest in this reviewed source package, not a live device reading or the newest product-family release.

certified assertion2025-11-19

EAC-certified ClearAccess software

2.5.6

This is the software version in the certified ClearVote 2.5 configuration, not a live device reading or a claim about the newest ClearVote release.

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
Pro V&V, Inc.: ClearVote 2.5 Certification Test Report, Revision 03 Pages 35-37: anomalies, deficiencies, resolutions, and certification recommendation

certified assertion2025-11-19

Certified COTS operating-system environment

Windows 10 IoT Enterprise LTSC 2021

The scope lists the certified software environment; it does not establish patch state or configuration on a fielded computer.

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware

VSTL + EAC change control

Configuration change history

These are source-linked certification and change records. Field deployment remains separate and unknown unless explicitly documented.

SW-10275EAC approved 2025-11-19

ClearAccess automatically rolls the system log when more than 1,000 log entries are present to reduce performance risk.

VSTL: Pro V&V, Inc.
Dossier relationship: included in certified 25 configuration
Field deployment: unknown

The change appears in the submitted ClearVote 2.5 certification modification set. It does not establish installation on a particular fielded unit.

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope

SW-10691EAC approved 2025-11-19

ClearAccess and ClearCast received minor libssl and OpenSSL version updates in the submitted modification set.

VSTL: Pro V&V, Inc.
Dossier relationship: included in certified 25 configuration
Field deployment: unknown

This is certification configuration history, not evidence of a field update, patch installation date, or current exposure on any unit.

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope

TR-DEF-556EAC approved 2025-11-19

The ClearAccess 2.5.5 write-in controls did not meet specified touch-area dimensions; the report records the corrected 2.5.6 interface.

VSTL: Pro V&V, Inc.
Dossier relationship: resolved during certification campaign
Field deployment: unknown

This is a test-campaign deficiency and resolution, not evidence that version 2.5.5 was used in a public election.

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
Pro V&V, Inc.: ClearVote 2.5 Certification Test Report, Revision 03 Pages 35-37: anomalies, deficiencies, resolutions, and certification recommendation

Findings and public status

Tests, limitations, and listing gaps

Neutral finding types replace a generic “bugs” bucket so affected versions and source scope remain visible.

resolved test deficiencyresolved in clearaccess 2 5 6

ClearAccess 2.5.5 write-in controls were undersized

Pro V&V reported that the write-in menu button dimensions and spacing in ClearAccess 2.5.5 did not meet the cited VVSG requirement and documented corrected dimensions and keyboard options in 2.5.6.

This is a certification-test finding with a reported resolution. It is not evidence that the deficient build was deployed in an election.

Pro V&V, Inc.: ClearVote 2.5 Certification Test Report, Revision 03 Pages 35-37: anomalies, deficiencies, resolutions, and certification recommendation

certification change noteupdate recorded for cve 2022 0778

OpenSSL libraries updated in the submitted modification set

The Pro V&V test plan identifies the ClearAccess and ClearCast libssl/OpenSSL update as a bug change addressing CVE-2022-0778.

The record describes the submitted certified configuration. It is not a field vulnerability scan, a current security assessment, or evidence of exploitation.

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope

test campaign resultcertified after documented resolutions

One anomaly and multiple deficiencies were documented during testing

The final Pro V&V report describes one ClearMark anomaly with no determined root cause and lists test deficiencies with reported corrective actions before recommending certification of the submitted system.

This system-level summary is not a claim that ClearAccess caused the ClearMark anomaly, that findings occurred in the field, or that no other defects exist.

U.S. Election Assistance Commission: ClearVote 2.5 certification record Certification record and public attachments
Pro V&V, Inc.: ClearVote 2.5 Certification Test Report, Revision 03 Pages 35-37: anomalies, deficiencies, resolutions, and certification recommendation

historical scope notenot fielded as of 2024 08 02 test plan

The modification had not been fielded when the 2024 test plan was written

The Pro V&V test plan stated that the ClearVote 2.5 modification had not been fielded for use as of the plan date.

This is a historical pre-certification statement. Do not infer that ClearVote 2.5 remained undeployed after certification or is not deployed today.

Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope

Power evidence

Backup supply and runtime

Named power equipment is rendered exactly as sourced. Missing capacity and runtime remain explicit instead of being inferred from another device or installation.

confirmed

ClearAccess power / backup supply

The certified ClearVote 2.5 scope names three external UPS options for ClearAccess. The reviewed sources do not provide a ClearAccess load-specific capacity or runtime claim.

Supply type: external uninterruptible power supply
Manufacturer: CyberPower; APC
UPS model: PR1500RT2U; SMT2200C; SRT1500RMXLA
Capacity: Not specified in reviewed source
Runtime: Not specified in reviewed source

Confirmed means the models appear in the certified configuration, not that every jurisdiction uses one, that all are used together, or that battery health and runtime are known for a fielded setup.

U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope

Deployment evidence

Dated jurisdiction observations

Deployment records remain at their documented grain. A system-level observation does not establish unit components, firmware, change adoption, or power configuration.

not collected

No reviewed deployment observation in this dossier

The source package currently establishes a certified configuration and test history, but no dated jurisdiction-level use record.

Absence from this catalog is not evidence that the system is unused. Deployment claims require a separately reviewed state or local source.

Jurisdiction context

Where this equipment appears in 2024 records

These jurisdiction rows are third-party administration context. A product-family name supports only that named family at the reported jurisdiction grain. A manufacturer match does not establish that a particular dossier model, component, firmware version, or certified configuration was deployed.

Named product family49 locales7 states; the source row explicitly names the family

Manufacturer context25 locales2 states; vendor only, not proof of this exact model

Map resolution74 pinned0 source rows open at state scope

49 matching sourced recordsPage 3 of 3

WA · countynamed family