Source-linked configuration dossier
Dominion Democracy Suite 5.17 / ImageCast Central
A separate source-linked dossier for the ImageCast Central configuration: a certified COTS high-speed scanner, workstation, ICC application, removable-media accessories, optional isolated network infrastructure, and documented backup power.
Federal certificate DVS-DemSuite5.17VVSG 1.0VSTL: Pro V&V, Inc.Editorial: published r3
Network configuration evidence
Documented paths, controls, and unknowns
Expected, documented, and observed configurations remain separate. Physical port capability is not treated as an active connection.
Safe public evidence boundaryReviewed 2026-07-21
Colorado's exact 5.17-CO technical data connects the ImageCast Central scanner locally to an ICC workstation by USB and describes ICC workstations using a Gigabit Ethernet port on a closed LAN to the EMS data-center network. The ICC user guide makes additional central-repository infrastructure conditional and requires election computers to remain isolated from the Internet and other networks.
This view publishes only the documented system roles, connection media, conditionality, and isolation controls. It omits addressing, credentials, database identifiers, cryptographic keys, switch settings, hostnames, and jurisdiction cable routes.1 sourced configuration view2 source imagesNo field-observed topology collected
expected layerstate certification documentationdocumented partial
ICC workstation with conditional closed data-center LAN
A COTS scanner attaches directly to its ICC workstation. Where the additional central ballot-scan repository or data center is used, ICC workstations connect through isolated network infrastructure to EMS storage and services.
Topologyconditional closed wired lan
Select a nodeHighlights its documented paths
ICC central scannerICC workstation
USB interface
Deliver scanner-captured ballot images to the ICC workstation - confirmedICC workstationIsolated LAN infrastructure
Gigabit Ethernet
Connect an ICC workstation to the closed EMS data-center network when the additional repository configuration is used - documented partialIsolated LAN infrastructureEMS data center
Closed local area network
Store and exchange results and ballot-image data within the election system boundary - documented partialdocumentedInternet isolation
The 5.17-CO ICC guide requires election computers to be isolated from any Internet connection.
documentedOther-network isolation
The election computing network must be isolated from jurisdiction computers and networks not used for election operations.
not publicly establishedField switch state
The selected switch, ports, addressing, and enabled services for any jurisdiction installation are not established here.
Operational details withheld
No addresses, credentials, keys, database names, hostnames, switch settings, or site-specific network diagrams are collected or displayed.
The documents describe permitted 5.17-CO architectures. They do not establish that a particular jurisdiction uses the optional repository, which COTS alternatives it selected, or the live state of a network.
Source diagrams and pagesExpand any image; scope and caveats stay attached.
source topology diagramDemocracy Suite 5.17-CO high-level system block diagram
The source itself warns that not all depicted components apply to every jurisdiction, and its disclaimer excludes modem and transmission functionality from the 5.17-CO campaign.
Colorado system-overview PDF page 21, Figure 2-3source document pageExact 5.17-CO ICC workstation and closed-LAN description
This technical-data statement is not a jurisdiction inventory and does not resolve the conditional repository language in the ICC user guide for a particular deployment.
Colorado system-overview PDF page 68, document page 60Evidence gapsUnknowns stay explicit and source-bounded.
Additional repository selection
The reviewed dossier does not establish whether a jurisdiction uses the optional additional central ballot-scan repository or data-center configuration.
The module preserves the conditional language instead of forcing one topology onto every ICC installation.Field-observed network topology
No dated jurisdiction diagram, switch inventory, interface state, or authorized inspection was collected.
A documented system architecture is not a live network observation.