Approved 13.02 Topology PACS Products 2.pdf

TO: David Helbock

1525 Wilson Blvd, Suite 225

Arlington, VA 22209

FROM: Matt Arnold on behalf of the FICAM Testing Program

DATE: 8/22/2022

RE: Updated Approval Letter for Listing on the GSA APL

Office of Management and Budget (OMB) issued M-19-17 that requires Federal

Agencies to procure only qualified products and services listed on the GSA Approved

Products List (APL) when implementing HSPD-12 into their environment. Procurement of approved products and services facilitates the government-wide objective of a federated and interoperable ICAM segment architecture, and ensures compliance, consistency and alignment of commercially-available products and services with the requirements and functional needs of government ICAM implementer.

Accordingly, the FIPS 201 Evaluation Program (Program) is very pleased to inform you that the following product/service has passed testing against all applicable Testing

Requirements. Please see the attached document that summarizes the specific parameters of the approval (e.g., product/service profile, what your product/service was tested with).

Your product/service will now be listed on the APL as shown below. If there are any errors in the listing information, please notify me within five (5) business days of receiving this letter.

1 Category-PACS and Validation Infrastructure

1.1 APL Certification Number

● (APL# 10103)

o Velocity Security Management System o Velocity Certificate Service o Hirsch MX-8 Panel o Hirsch MX-4 Panel o Hirsch MX-2 Panel o Hirsch MX-1 Panel o Hirsch MX1 ME Panel o Hirsch M8 Panel o Hirsch M2 Panel o Secure Network Interface Board v3 (SNIB3) o RS-485 Reader Expansion Board

1.2 Product/Service Information

Organization Name: Identiv Name of Product or Service: Velocity Security Management System & Velocity

Certificate Checking Service Part Number: VELFED

Hardware Version: N/A Software Version: Velocity 3.8.4 and VCCS 3.8.4.41 Firmware Version: N/A

TAA Compliant: Yes

Organization Name: Identiv

Name of Product or Service: Hirsch MX controllers

MX1 / MX2 / MX4 / MX8

Part Number: Mx-1-ME, Mx-2-S3OB, Mx-4-S3OB, Mx-8-S3OB

Hardware Version: 7 Software Version: N/A Firmware Version: 8.2.01.28/04.00.0088

Organization Name: Identiv Name of Product or Service: Secure Network Interface Board v3 (SNIB3)

Part Number: SNIB3 Hardware Version: N/A Software Version: N/A Firmware Version: 4.00.0088

1.3 Document History

Status Date Comments

Approved 2/1/2017 Final Approval Date for PACS Topology 13.02 APL#

10103

Update 2/3/2017 Updated to reflect new part numbering scheme for OSDP readers (PACS Topology 13.02).

Update 9/19/2017 Updated solution to include legacy M2 and M8 controllers.

Update 12/5/2019 Solution updated to Velocity 3.7 SP2, added MX-1, added Contact ScramblePad reader, added OSDP Veridt readers.

Update 8/3/2020 Solution updated to Velocity 3.8.1, Added uTrust

Contact Readers, updated uTrust Firmware, SNIB3

Firmware, Controller Firmware.

Update 4/9/2021 Solution updated to Velocity Software, Velocity Cert

Check, addition of MX-1-ME

Update 9/21/2021 Update to Velocity 3.8.3 and Cert Service 3.8.3.370

Update 1/13/2022 Update to Velocity Cert Service and controller firmware in preparation for Allegion locksets.

Update 8/22/2022 Update to Velocity 3.8.4 and Cert Service 3.8.4.41 and controller firmware

1.4 Restrictions:

The Identiv Velocity Security Management System and Velocity Certificate Service solution (APL# 10103) has been tested and approved as a component of a fully compliant

ICAM Solution. The end-to-end solution components used to test the ICAM compliance of the approved solution are listed below.

1.4.1 PACS Topology 13.02

● Identiv PIV Reader o Identiv uTrust Mullion Reader - OSDP (APL# 10104) o Identiv uTrust Wallmount Reader - OSDP(APL# 10105) o Identiv uTrust Keypad Reader - OSDP (APL# 10106) o Identiv uTrust ScramblePad Reader - OSDP (APL# 10107) o Identiv uTrust Contact TS Reader with Scramblepad – OSDP (APL#

10119) o Identiv uTrust SC Wallmount Contact/Contactless Reader – OSDP (APL#

10124) o Identiv uTrust SC Keypad Contact/Contactless Reader - OSDP(APL#

10125)

● Veridt PIV Reader o Veridt Dual Bio Contact/Contactless Reader (APL# 10092) o Veridt Stealth Dual Contact/Contactless Reader (APL# 10093) o Veridt Stealth Lite Dual Contact/Contactless Reader (APL# 10094) o Veridt Stealth Contactless Reader (APL# 10095) o Veridt Stealth Lite Contactless Reader (APL# 10096)

Approval of the above product/service indicates your cooperation with the Program and successful testing against a rigorous, comprehensive set of functional requirements derived from government-wide specifications. Testing included positive and negative test cases, and threat vectors.

Given the strategic government-wide importance of the APL, the scope and extent of testing performed on your product/service, and the rigor of that testing, the Program would like to acknowledge the noteworthiness of the approval and listing. Your product/service will now be available to all Federal Agencies for procurement.

Please note that continued listing on the APL requires ongoing conformance to all applicable requirements, including requirements added or amended over time. A listed product/service can become non-conformant for various reasons including but not limited to:

● Failure to pass testing against new and revised requirements before the effective date of the new/revised requirements.

● Problems discovered in your listed product/service (or class of product/service) are not addressed within time frames specified by the Program.

Refer to applicable Agreements and Program documents for specific details regarding ongoing compliance including severity levels and remediation time frames. Listed products and services that fall out of conformance will be removed from the APL and added to the Removed Products List (RPL).

If you have any questions, please feel free to contact me.

Matthew Arnold

GSA OGP

(703) 254-6750

Matthew.Arnold@gsa.gov