Approved 13.02 Topology PACS Products 3.pdf

TO: Rafael Molinari

Kastle Systems International LLC

6402 Arlington Boulevard

Falls Church, VA 22042

FROM: Matt Arnold on behalf of the FIPS 201 Evaluation Program

DATE: 5/17/2022

RE: Approval of Products/Services for Listing on the GSA APL

Office of Management and Budget (OMB) issued M-19-17 that requires Federal

Agencies to procure only qualified products and services listed on the GSA Approved

Products List (APL) when implementing HSPD-12 into their environment. Procurement of approved products and services facilitates the government-wide objective of a federated and interoperable ICAM segment architecture, and ensures compliance, consistency and alignment of commercially-available products and services with the requirements and functional needs of government ICAM implementer.

Accordingly, the FIPS 201 Evaluation Program (Program) is very pleased to inform you that the following product/service has passed testing against all applicable Testing

Requirements. Please see the attached document that summarizes the specific parameters of the approval (e.g., product/service profile, what your product/service was tested with).

Your product/service will now be listed on the APL as shown below. If there are any errors in the listing information, please notify me within five (5) business days of receiving this letter.

1 Category-PACS and Validation Infrastructure (PVI)

1.1 APL Certification Number

● (APL #10116)

o Kastle CPS (EP) o Kastle PIV Enrolling Station o Kastle SCM o Kastle Certificate Verification Appliance (CVA)

1.2 Product/Service Information

Organization Name: Kastle Systems International LLC Name of Product or Service: Kastle Certificate Processing Server (CPS)

Part Number: 160067 Hardware Version: N/A Software Version: 9.4 Firmware Version: N/A

Name of Product or Service: Kastle PIV Enrolling Station

Part Number: PIVEnroll Hardware Version: N/A Software Version: 5.9.5151.0

Name of Product or Service: Kastle Secure Credential Door Control Module

(SCM)

Part Number: 201049

Hardware Version: 1.1 Software Version: N/A Firmware Version: 7.83

Name of Product or Service: Certificate Verification Appliance (CVA)

Part Number: N/A (off-site service) Hardware Version: R630 Software Version: 7.5.0.1

1.3 Document History

Status Date Comments

Approved 5/8/2019 Final Approval Date for APL# 10116. Kastle CPS (EP), SCM 1.1, CVA 7.5.0.1

Update 5/17/2022 Update approval for solution

1.4 Restrictions:

Kastle Systems CPS (EP) PACS and Validation Infrastructure, (APL #10016) has been tested and approved as a component of a fully compliant ICAM Solution with the limitation of one-factor (CAK) authentication using the tested PACS PIV reader(s). The end to end components used to test the ICAM compliance of your approved solution are listed below.

● PIV Reader o Identiv uTrust TS Reader, Wall Mount - OSDP (APL #10105) o Identiv uTrust TS Reader, Mullion - OSDP (APL #10104)

Approval of the above product/service indicates your cooperation with the Program and successful testing against a rigorous, comprehensive set of functional requirements derived from government-wide specifications. Testing included positive and negative test cases, and threat vectors.

Given the strategic government-wide importance of the APL, the scope and extent of testing performed on your product/service, and the rigor of that testing, the Program would like to acknowledge the noteworthiness of the approval and listing. Your product/service will now be available to all Federal Agencies for procurement.

Please note that continued listing on the APL requires ongoing conformance to all applicable requirements, including requirements added or amended over time. A listed product/service can become non-conformant for various reasons including but not limited to:

● Failure to pass testing against new and revised requirements before the effective date of the new/revised requirements.

● Problems discovered in your listed product/service (or class of product/service) are not addressed within time frames specified by the Program.

Refer to applicable Agreements and Program documents for specific details regarding ongoing compliance including severity levels and remediation time frames. Listed products and services that fall out of conformance will be removed from the APL and added to the Removed Products List (RPL).

If you have any questions, please feel free to contact me.

Matthew Arnold

GSA OGP

(703) 254-6750

Matthew.Arnold@gsa.gov