RFQ (3) LZK - Access Control - Attachment (3) - FIPS 201 NWWP93402300223SRG.pdf

TO: Dick Coulombe

HID Global

611 Center Ridge Drive

Austin, TX 78753

FROM: Matthew Arnold on behalf of the FIPS 201 Evaluation Program

DATE: 11/5/2021

RE: Update of APL Approval Letter

Office of Management and Budget (OMB) issued M-19-17 that requires Federal

Agencies to procure only qualified products and services listed on the GSA Approved

Products List (APL) when implementing HSPD-12 into their environment. Procurement of approved products and services facilitates the government-wide objective of a federated and interoperable ICAM segment architecture, and ensures compliance, consistency and alignment of commercially-available products and services with the requirements and functional needs of government ICAM implementer.

Accordingly, the FIPS 201 Evaluation Program (Program) is very pleased to inform you that the following product/service has passed testing against all applicable Testing

Requirements. Please see the attached document that summarizes the specific parameters of the approval (e.g., product/service profile, what your product/service was tested with).

Your product/service will now be listed on the APL as shown below. If there are any errors in the listing information, please notify me within five (5) business days of receiving this letter.

Approval Authorization Letter

1 Category- PIV Reader

1.1 APL Certification Number

● (APL#10003)

o pivCLASS RP40 Contactless Reader

● (APL# 10004)

o pivCLASS RK40 Contactless Reader + PIN

● (APL# 10005)

o pivCLASS RPK40 Contactless Reader + PIN

● (APL# 10006)

o pivCLASS R40 Contactless Reader

● (APL# 10007)

o pivCLASS RKCL40 Contact/Contactless Reader with PIN

● (APL# 10008)

o pivCLASS RPKCL40 Contact/Contactless Reader with PIN

● (APL# 10026)

o pivCLASS RPKCLB40 Contact/Contactless Reader with PIN & BIO

● (APL# 10052)

o pivCLASS RKCLB40 Contact/Contactless Reader with PIN & BIO

● (APL# 10085)

o pivCLASS R10 Contactless Reader

1.2 Product/Service Information

Organization Name: HID Global Name of Product or Service: pivCLASS RP40 Contactless Reader

Part Number: 920PH(R/P) Hardware Version: REV.E Software Version: N/A Firmware Version: VAS00300, Rev B.2

Name of Product or Service: pivCLASS RK40 Contactless Reader + PIN

Part Number: 921NH(R/P) Hardware Version: REV.E

Name of Product or Service: pivCLASS RPK40 Contactless Reader + PIN

Part Number: 921PH(R/P) Hardware Version: REV.E

Name of Product or Service: pivCLASS R40 Contactless Reader

Part Number: 920NH(R/P) Hardware Version: REV.E

Name of Product or Service: pivCLASS RKCL40 Contact/Contactless Reader + PIN

Part Number: 923NP(R/P) Hardware Version: REV.E

Name of Product or Service: pivCLASS RPKCL40 Contact/Contactless Reader +

PIN

Part Number: 923PP(R/P)

Hardware Version: REV.E

Name of Product or Service: pivCLASS RPKCLB40 Contact/Contactless Reader +

PIN + BIO

Part Number: 924PP(R/P)

Hardware Version: REV.E

Name of Product or Service: pivCLASS RKCLB40 Contact/Contactless Reader +

PIN + BIO

Part Number: 924NP(R/P)

Hardware Version: REV.E

Name of Product or Service: pivCLASS R10 Contactless Reader

Part Number: 900NH(R/P)

Hardware Version: REV.E

1.3 Restrictions:

This product has been tested and approved as a component of a fully compliant FICAM

Solution. The end to end solution components used to test the FICAM compliance of the approved solution(s) are listed below.

13.01 Topology:

Solution - 1:

● PACS Infrastructure: (APL# 10001) o Software House C*CURE 9000 Release v2.70.SP5 o iSTAR Edge – Series of Intelligent Controllers o iSTAR Ultra – Series of Intelligent Controllers

● Validation System: (APL# 10002) o HID pivCLASS Registration Engine (C●CURE 9000) o HID pivCLASS Certificate Manager o HID pivCLASS Reader Services o HID pivCLASS IDPublisher o HID pivCLASS Authentication Module

Solution – 3:

● PACS Infrastructure: (APL# 10011) o Software House C*CURE 800 Server Release o iSTAR Pro – Series of Intelligent Controllers o iSTAR eX – Series of Intelligent Controllers o iSTAR Edge – Series of Intelligent Controllers

● Validation System (APL# 10012) o pivCLASS Registration Engine (CCURE-800) o pivCLASS Certificate Manager o pivCLASS Reader Services o pivCLASS IDPublisher o pivCLASS Authentication Module

Solution – 4:

● PACS Infrastructure (APL# 10013) o Identiv Velocity Physical Access Control System o Hirsch Panel MX-8 with SNIB3 o Hirsch Panel MX-4 with SNIB3 o Hirsch Panel MX-2 with SNIB3

● Validation System (APL# 10014) o pivCLASS Registration Engine (Identiv Velocity) o pivCLASS Certificate Manager o pivCLASS Reader Services

Solution – 6:

● PACS Infrastructure (APL #10019) o Gallagher PIV Command Centre o Controller 6000 High Spec – PIV

● Validation System (APL# 10020) o pivCLASS Registration Engine (Gallagher PIV Command Centre)

Solution – 8:

● PACS Infrastructure (APL# 10112 and 10027) o UTC Fire & Securities America Corp, Inc. Lenel OnGuard 7.5 Software for ES, ADV, PRO or Enterprise system types o Authentication Module Solution

▪ Access Series Intelligent System controller (ISC)

▪ Access Series Intelligent System dual door controller with built-in dual reader interface module (IDRC)

▪ Access Series Intelligent System single door controller (ISDC) edge controller w/ POE

▪ Dual Reader Interface module (DRI)

▪ Single Reader Interface module (SRI) o Embedded Solution

▪ Intelligent System Controller with Dual reader interface, includes pivCLASS Embedded Authentication

● Validation System (APL# 10113 and 10028) o pivCLASS Registration Engine for Lenel OnGuard o pivCLASS Certificate Manager o pivCLASS Reader Services o pivCLASS IDPublisher o pivCLASS Embedded Authentication Firmware

Solution – 9:

● PACS Infrastructure (APL# 10036) o RS2 Technologies Access It! Universal Software with USB Dongle o Hybrid Intelligent System Controller o Two Reader Interface

● Validation System (APL# 10037) o pivCLASS Registration Engine for RS2 Access It!

o pivCLASS Certificate Manager o pivCLASS Reader Services

Solution – 11:

● PACS Infrastructure (APL# 10043) o Quintron AccessNsite v7.9 o Mercury EP-1502 Intelligent Controller

● Validation System (APL# 10044) o pivCLASS Registration Engine for Quintron AccessNsite o pivCLASS Certificate Manager o pivCLASS Reader Services

Solution – 12:

● PACS Infrastructure (APL #10047) o Symmetry Security Management Software (Server software and client) o Reader license o Data Import License o Intelligent Database Controller o Symmetry 4-Door Controller (Wiegand, alarm and door furniture interface) o Wiegand Interface Module – License key for 4 readers.

● Validation System (APL# 10048) o pivCLASS Registration Engine for (AMAG Symmetry) o pivCLASS Certificate Manager o pivCLASS Reader Services

Solution – 13:

● PACS Infrastructure (APL #10061) o Genetec Security Center – Synergis Physical Access Control System o Intelligent System Controller with Dual/Single reader interface, includes pivCLASS Embedded Authentication and pivClass Authentication

Module

● Validation System (APL# 10062) o pivCLASS Registration Engine for Genetec Security Center o pivCLASS Certificate Manager o pivCLASS Reader Services o pivCLASS Embedded Authentication Firmware o pivCLASS IDPublisher1

Meets one or more optional test cases in FRTC, but not required for minimum FICAM compliance.

Solution – 14:

● PACS Infrastructure (APL #10063) o Honeywell Pro-Watch CE Server Software o EP2500 Intelligent Controller o MR52 2 Reader Board o PW6101 Single Door Controller o PW6101 Single Reader Board

● Validation System (APL# 10064) o pivCLASS Registration Engine for Honeywell Pro-Watch o pivCLASS Certificate Manager o pivCLASS Reader Services

Solution – 15:

● PACS Infrastructure (APL #10071) o DAQ StarWatch SMS o EntroStar Panel

● Validation System (APL# 10072) o pivCLASS Registration Engine for DAQ StarWatch SMS o pivCLASS Certificate Manager o pivCLASS Reader Services

Solution – 17:

● PACS Infrastructure (APL #10075) o DNA Fusion 6.4 Access Control Software o SSP-D2 Intelligent Controller o NCS-100 Single Door Subcontroller o RSC-2 Dual Door Subcontroller

● Validation System (APL# 10076) o pivCLASS Registration Engine for Open Options DNA Fusion 6 o pivCLASS Certificate Manager o pivCLASS Reader Services

Solution – 18:

● PACS Infrastructure (APL #10097) o GCS System Galaxy Access Control Software o FiPACK Controller 635PACK2HDPS, 635PACK4HDPS, 635PACK6HDPS

● Validation System (APL# 10098) o pivCLASS Registration Engine for GCS System Galaxy o pivCLASS Certificate Manager o pivCLASS Reader Services o pivCLASS IDPublisher o pivCLASS Authentication Module

Solution – 19:

● PACS Infrastructure (APL #10120) o Feenics Keep V3 o Feenics Intelligent two door controller w/ embedded pivCLASS

● Validation System (APL# 10121) o pivCLASS Registration Engine for Feenics Keep o pivCLASS Certificate Manager o pivCLASS Reader Services o pivCLASS Embedded Authentication

Solution – 20:

● PACS Infrastructure (APL #10122) o Avigilon ACM v6.4.2 o Intelligent two door controller x/ Embedded Authentication o HID Authentication Module

● Validation System (APL# 10123) o pivCLASS Registration Engine for Avigilon ACM2 o pivCLASS Certificate Manager, Release o pivCLASS Reader Services, Release o pivCLASS IDPublisher3, Release o pivCLASS Embedded Authentication

Approval of the above product/service indicates your cooperation with the Program and successful testing against a rigorous, comprehensive set of functional requirements pivCLASS Registration Engine substituted for FIPS 201 SDK with this release submission

Meets one or more optional test cases in FRTC, but not required for minimum FICAM compliance.

derived from government-wide specifications. Testing included positive and negative test cases, and threat vectors.

Given the strategic government-wide importance of the APL, the scope and extent of testing performed on your product/service, and the rigor of that testing, the Program would like to acknowledge the noteworthiness of the approval and listing. Your product/service will now be available to all Federal Agencies for procurement.

Please note that continued listing on the APL requires ongoing conformance to all applicable requirements, including requirements added or amended over time. A listed product/service can become non-conformant for various reasons including but not limited to:

● Failure to pass testing against new and revised requirements before the effective date of the new/revised requirements.

● Problems discovered in your listed product/service (or class of product/service) are not addressed within time frames specified by the Program.

Refer to applicable Agreements and Program documents for specific details regarding ongoing compliance including severity levels and remediation time frames. Listed products and services that fall out of conformance will be removed from the APL and added to the Removed Products List (RPL).

If you have any questions, please feel free to contact me.

Matthew Arnold

GSA OGP

(703) 254-6750 (Cell)

Matthew.Arnold@gsa.gov