Source-linked configuration dossier
Clear Ballot ClearVote 2.5 / ClearAccess
A source-linked dossier for the ClearAccess ballot-marking configuration within EAC-certified ClearVote 2.5, including named COTS components, explicit external UPS options, certified software observations, and Pro V&V test findings.
Federal certificate CBG-CV-25VVSG 1.0VSTL: Pro V&V, Inc.Editorial: published r5
Version evidence
Last sourced observations
“Last” means latest in this reviewed source package, not a live device reading or the newest product-family release.
certified assertion2025-11-19
EAC-certified ClearAccess software
2.5.6
This is the software version in the certified ClearVote 2.5 configuration, not a live device reading or a claim about the newest ClearVote release.
- U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Report, Revision 03 Pages 35-37: anomalies, deficiencies, resolutions, and certification recommendation
certified assertion2025-11-19
Certified COTS operating-system environment
Windows 10 IoT Enterprise LTSC 2021
The scope lists the certified software environment; it does not establish patch state or configuration on a fielded computer.
- U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
VSTL + EAC change control
Configuration change history
These are source-linked certification and change records. Field deployment remains separate and unknown unless explicitly documented.
SW-10275EAC approved 2025-11-19
ClearAccess automatically rolls the system log when more than 1,000 log entries are present to reduce performance risk.
- VSTL
- Pro V&V, Inc.
- Dossier relationship
- included in certified 25 configuration
- Field deployment
- unknown
The change appears in the submitted ClearVote 2.5 certification modification set. It does not establish installation on a particular fielded unit.
- U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope
SW-10691EAC approved 2025-11-19
ClearAccess and ClearCast received minor libssl and OpenSSL version updates in the submitted modification set.
- VSTL
- Pro V&V, Inc.
- Dossier relationship
- included in certified 25 configuration
- Field deployment
- unknown
This is certification configuration history, not evidence of a field update, patch installation date, or current exposure on any unit.
- U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope
TR-DEF-556EAC approved 2025-11-19
The ClearAccess 2.5.5 write-in controls did not meet specified touch-area dimensions; the report records the corrected 2.5.6 interface.
- VSTL
- Pro V&V, Inc.
- Dossier relationship
- resolved during certification campaign
- Field deployment
- unknown
This is a test-campaign deficiency and resolution, not evidence that version 2.5.5 was used in a public election.
- U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Report, Revision 03 Pages 35-37: anomalies, deficiencies, resolutions, and certification recommendation
Findings and public status
Tests, limitations, and listing gaps
Neutral finding types replace a generic “bugs” bucket so affected versions and source scope remain visible.
resolved test deficiencyresolved in clearaccess 2 5 6
ClearAccess 2.5.5 write-in controls were undersized
Pro V&V reported that the write-in menu button dimensions and spacing in ClearAccess 2.5.5 did not meet the cited VVSG requirement and documented corrected dimensions and keyboard options in 2.5.6.
This is a certification-test finding with a reported resolution. It is not evidence that the deficient build was deployed in an election.
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Report, Revision 03 Pages 35-37: anomalies, deficiencies, resolutions, and certification recommendation
certification change noteupdate recorded for cve 2022 0778
OpenSSL libraries updated in the submitted modification set
The Pro V&V test plan identifies the ClearAccess and ClearCast libssl/OpenSSL update as a bug change addressing CVE-2022-0778.
The record describes the submitted certified configuration. It is not a field vulnerability scan, a current security assessment, or evidence of exploitation.
- U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope
test campaign resultcertified after documented resolutions
One anomaly and multiple deficiencies were documented during testing
The final Pro V&V report describes one ClearMark anomaly with no determined root cause and lists test deficiencies with reported corrective actions before recommending certification of the submitted system.
This system-level summary is not a claim that ClearAccess caused the ClearMark anomaly, that findings occurred in the field, or that no other defects exist.
- U.S. Election Assistance Commission: ClearVote 2.5 certification record Certification record and public attachments
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Report, Revision 03 Pages 35-37: anomalies, deficiencies, resolutions, and certification recommendation
historical scope notenot fielded as of 2024 08 02 test plan
The modification had not been fielded when the 2024 test plan was written
The Pro V&V test plan stated that the ClearVote 2.5 modification had not been fielded for use as of the plan date.
This is a historical pre-certification statement. Do not infer that ClearVote 2.5 remained undeployed after certification or is not deployed today.
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope
Power evidence
Backup supply and runtime
Named power equipment is rendered exactly as sourced. Missing capacity and runtime remain explicit instead of being inferred from another device or installation.
confirmed
ClearAccess power / backup supply
The certified ClearVote 2.5 scope names three external UPS options for ClearAccess. The reviewed sources do not provide a ClearAccess load-specific capacity or runtime claim.
- Supply type
- external uninterruptible power supply
- Manufacturer
- CyberPower; APC
- UPS model
- PR1500RT2U; SMT2200C; SRT1500RMXLA
- Capacity
- Not specified in reviewed source
- Runtime
- Not specified in reviewed source
Confirmed means the models appear in the certified configuration, not that every jurisdiction uses one, that all are used together, or that battery health and runtime are known for a fielded setup.
- U.S. Election Assistance Commission: ClearVote 2.5 Certificate and Scope of Conformance Pages 17-25: proprietary versions, COTS software, and COTS hardware
- Pro V&V, Inc.: ClearVote 2.5 Certification Test Plan, Version 01 Pages 4-12 and 27-30: submitted changes, system equipment, and known-field-issue scope
Deployment evidence
Dated jurisdiction observations
Deployment records remain at their documented grain. A system-level observation does not establish unit components, firmware, change adoption, or power configuration.
not collected
No reviewed deployment observation in this dossier
The source package currently establishes a certified configuration and test history, but no dated jurisdiction-level use record.
Absence from this catalog is not evidence that the system is unused. Deployment claims require a separately reviewed state or local source.