Source-linked configuration dossier

ES&S EVS 6.4.0.0 / DS200

A source-linked pilot dossier for the DS200 within the EAC-certified EVS 6.4.0.0 configuration, with historical change records, separately scoped optional modem models and vulnerability reviews, and a labeled Washington deployment observation.

Federal certificate ESSEVS6400VVSG 1.0VSTL: Pro V&V, Inc.Editorial: published r8

Components12all source-linked

Hardware facts133 explicit unknowns

Change records6field status kept separate

Findings/statuses4version-scoped

Archived sources40local hash verified

Do not collapse evidence scopes.

A certified component list does not prove what a jurisdiction installed. A jurisdiction system-version listing does not prove device firmware, configuration-change adoption, internal parts, or power topology.

Selectable schematic

Orthographic component explorer

Use the accessible component list as the source of truth. The optional 3D view mirrors that selection.

Components12 records

illustrative not to scale

Reference: DS200 open poll-place configuration with ballot cabinet, raised protective cover, scanner deck, and tilted display

2D evidence view is active

Open the lightweight local 3D schematic when useful. It is opt-in on every screen size.

certified configuration

certified component

DS200 scanner and tabulator assembly

The certified scope describes the DS200 as a poll-place scanner and tabulator that scans voter selections from both sides of a ballot simultaneously.

Models: DS200

Hardware revisions in source: 1.2, 1.3

EAC-certified firmware: 3.1.0.0

Washington-approved firmware: 3.1.0.0

Washington-approved hardware revisions: 1.2, 1.3, 1.3.13

Linked findings: Previously scanned ballot is not automatically distinguished

Washington's state-approved configuration also lists hardware 1.3.13. No source in this pilot identifies the hardware revision of a particular county unit.

Sources for this selection

EVS 6.4.0.0 Certificate and Scope of Conformance U.S. Election Assistance Commission
DS200 Poll Place Scanner and Tabulator One-Sheet Election Systems & Software
ES&S EVS 6.4.0.0 Certification Test Report TR-01-01-ESS-2023-01.03 Pro V&V, Inc.
Amended Vendor Application for EVS 6.4.0.0 Certification Washington Office of the Secretary of State
Report on the Examination of ES&S EVS 6.4.0.0 Washington Office of the Secretary of State

Network configuration evidence

Documented paths, controls, and unknowns

Expected, documented, and observed configurations remain separate. Physical port capability is not treated as an active connection.

Safe public evidence boundaryReviewed 2026-07-21

For EVS 6.4.0.0, the EAC scope defines Regional Results as a separate application at a regional sending site, and Pro V&V tested transmission of DS200 result files through Regional Results over a VPN. The reviewed exact-version text does not establish that the DS200 itself was the VPN endpoint. Older federal and state records separately document a Unity 3.4.0.0 wireline SFTP reference design, a Michigan EVS 5.3.2.0 wireless-carrier and SFTP path, and optional DS200 cellular hardware families without proving EVS 6.4 certification, firmware, activation, or field use.

The module publishes roles, high-level paths, connection media when established, and evidence boundaries. It excludes IP addresses, credentials, VPN parameters, keys, APNs, SIM identifiers, carrier accounts, device identifiers, and jurisdiction routing details.

4 sourced configuration views7 source imagesNo field-observed topology collected

expected layervstl test configurationdocumented partial

EVS 6.4.0.0 Regional Results test path

Pro V&V tested DS200 results transmitted by the separate Regional Results application through a VPN to the EMS. The source establishes the end-to-end result workflow but not a direct DS200 network session or the local handoff medium from the tabulator to the Regional Results client.

Topologyresults transmission service

Select a nodeHighlights its documented paths

DS200Regional Results client

Result-data handoff; local medium not established in the reviewed passage

Make DS200 result data available to Regional Results - not publicly established

Regional Results clientCustomer-dedicated VPN path

Virtual private network over a customer-dedicated network

Transmit encrypted unofficial results collection files - confirmed

Customer-dedicated VPN pathElectionware EMS

Virtual private network

Deliver transmitted result files to the central EMS - confirmed

documentedEncrypted unofficial result files

The EAC scope states that Regional Results securely transmits encrypted unofficial results collection files.

documentedCustomer-dedicated network

The certified Regional Results description specifies a customer-dedicated network.

not publicly establishedDirect DS200 network session

The reviewed exact-version passages do not make the DS200 itself the VPN endpoint or identify a direct scanner-to-network connection.

Operational details withheld

No addresses, credentials, VPN settings, keys, APNs, SIM data, carrier accounts, or site-specific routing information are collected or shown.

A successful VSTL system test is not evidence that a jurisdiction enabled Regional Results, used the same network design, or transmitted results in a particular election.

U.S. Election Assistance Commission: EVS 6.4.0.0 Certificate and Scope of Conformance Pro V&V, Inc.: ES&S EVS 6.4.0.0 Certification Test Report TR-01-01-ESS-2023-01.03

Source diagrams and pagesExpand any image; scope and caveats stay attached.

source topology diagramEVS 6.4.0.0 certified-system overview diagram

The system-level figure contains many EVS components and paths. It does not prove that every component or connection is present in a DS200 deployment.

EAC scope PDF page 4, document page 3

U.S. Election Assistance Commission: EVS 6.4.0.0 Certificate and Scope of Conformance

source document pagePro V&V EVS 6.4.0.0 result-transmission accuracy-test statement

This is evidence of a laboratory test configuration and successful result transfer, not a field deployment or direct DS200 network-session record.

Pro V&V test-report PDF page 30, report page 25

Pro V&V, Inc.: ES&S EVS 6.4.0.0 Certification Test Report TR-01-01-ESS-2023-01.03

source topology diagramMichigan contract exhibit: historical DS200 wireless results network

The diagram belongs to a historical Michigan procurement response and does not establish EVS 6.4.0.0 certification, a current county topology, an installed modem, or election use.

Michigan contract PDF page 101, contract page 62, Wireless Results Network

State of Michigan Department of Technology, Management & Budget; Election Systems & Software: Contract 071B7700120: Voting System Hardware, Firmware, Software and Service

manufacturer reference pinoutMultiTech Universal Socket reference pinout

This is a generic product-family interface reference. The guide says not all modems include every pin; it is not a DS200 carrier-board pin map or proof that any interface is wired or enabled in a DS200.

Universal SocketModem Developer Guide PDF page 12

Multi-Tech Systems, Inc.: Universal SocketModem Developer Guide S000342, Version W

manufacturer reference board drawingMultiTech generic SocketModem developer-board layout

The source labels third-party components as examples and describes a developer board for SocketModems generally. It is not a DS200 carrier-board drawing, teardown, port inventory, or placement record.

Universal SocketModem Developer Guide PDF page 20

Multi-Tech Systems, Inc.: Universal SocketModem Developer Guide S000342, Version W

manufacturer reference block diagramMultiTech generic SocketModem developer-board block diagram

This developer-board diagram shows possible reference connections across the broader SocketModem platform. It does not establish which ports exist, are connected, or are enabled on a DS200 modem carrier board.

Universal SocketModem Developer Guide PDF page 22

Multi-Tech Systems, Inc.: Universal SocketModem Developer Guide S000342, Version W

manufacturer reference installation pageMultiTech generic modem, antenna-lead, and SIM installation guidance

This generic procedure establishes product-family installation concepts only. It is not evidence that a DS200 contains a SIM holder, antenna lead, active SIM, or any particular SocketModem model.

Universal SocketModem Developer Guide PDF page 31

Multi-Tech Systems, Inc.: Universal SocketModem Developer Guide S000342, Version W

Evidence gapsUnknowns stay explicit and source-bounded.

Not established

DS200-to-Regional Results handoff

The reviewed exact-version passages do not identify whether the local result handoff used removable media or another mechanism, and they do not establish the DS200 as the VPN endpoint.

The module leaves the local medium unresolved instead of drawing a direct network link.

U.S. Election Assistance Commission: EVS 6.4.0.0 Certificate and Scope of Conformance Pro V&V, Inc.: ES&S EVS 6.4.0.0 Certification Test Report TR-01-01-ESS-2023-01.03

Not established

Field configuration and modem state

No dated jurisdiction network diagram, interface inspection, modem inventory, firmware reading, carrier activation record, or transmission log was collected for a particular DS200.

Optional and historical records must not be presented as field evidence.

U.S. Election Assistance Commission: EVS 6.4.0.0 Certificate and Scope of Conformance Florida Department of State, Division of Elections: ES&S EVS Release 4.5.0.0 Version 4 Test Report Addendum (Revision 1)Pro V&V, Inc.; Minnesota Judicial Branch record mirrored by Democracy Docket: EVS 5.3.4.1 Test Report hardware-components table, court-filed Exhibit A

Version evidence

Last sourced observations

“Last” means latest in this reviewed source package, not a live device reading or the newest product-family release.

certified assertion2023-08-18

EAC-certified firmware

3.1.0.0

This is the firmware in the certified EVS 6.4.0.0 configuration, not a live reading from a deployed unit and not a claim about the newest EVS family firmware.

U.S. Election Assistance Commission: EVS 6.4.0.0 Certificate and Scope of Conformance Pages 1-10, especially proprietary components on pages 6-7
Pro V&V, Inc.: ES&S EVS 6.4.0.0 Certification Test Report TR-01-01-ESS-2023-01.03 Sections 3.2, 3.3, and Tables 4-1 through 4-3

documented assertion2023-11-30

Washington-approved firmware

3.1.0.0

Washington's approved configuration is not a county device inspection.

documented assertion2023-11-30

Washington-approved hardware revisions

1.2, 1.3, 1.3.13

The state record lists approved revisions; it does not identify which revision a county deployed.

VSTL + EAC change control

Configuration change history

These are source-linked certification and change records. Field deployment remains separate and unknown unless explicitly documented.

ESS-983EAC approved 2018-12-14

Exterior seal-area change for DS200 hardware 1.3.10.0.

VSTL: Pro V&V, Inc.
Dossier relationship: historical ds200 family change
Field deployment: unknown

The record does not establish inclusion in the EVS 6.4.0.0 baseline or local installation.

U.S. Election Assistance Commission: ESS-983 engineering change record ECO metadata and attachment
Pro V&V, Inc.: ES&S ECO 983 analysis DS200 hardware 1.3.10.0 seal-area change

ESS-1042EAC approved 2019-09-13

End-of-life replacements and related DS200 hardware 1.3.11 changes: touchscreen controller, LCD/bracket/LVDS cables, display service subassembly, quad-core processor, scanner-board motor-driver accommodation, and USB-hub power-cable wire gauge.

VSTL: Pro V&V, Inc.
Dossier relationship: historical ds200 family change
Field deployment: unknown

The ECO documents an approved historical configuration change, not the internals of every DS200 or an EVS 6.4.0.0 deployment.

U.S. Election Assistance Commission: ESS ECO 1042 approval Approval letter
U.S. Election Assistance Commission: ESS-1042 engineering change record ECO metadata, analysis, and approval attachments
Pro V&V, Inc.: ESS ECO 1042 Analysis Page 1 overview and affected systems

ESS-1035EAC approved 2020-02-14

Scanner-board FPGA-code update described as improving thermal stability and calibration resolution.

VSTL: Pro V&V, Inc.
Dossier relationship: historical ds200 family change
Field deployment: unknown

The source does not identify the board or FPGA revision installed in a particular EVS 6.4.0.0 unit.

U.S. Election Assistance Commission: ES&S ECO 1035 approval Approval letter
U.S. Election Assistance Commission: ESS-1035 engineering change record ECO metadata, analysis, and approval attachments
Pro V&V, Inc.: ES&S ECO 1035 Analysis Form Page 1 overview and affected systems

ESS-1044EAC approved 2019-09-13

Ballot-box change adding a ballot-bag option.

VSTL: Pro V&V, Inc.
Dossier relationship: historical ds200 family change
Field deployment: unknown

An approved accessory option does not establish use by a particular jurisdiction.

U.S. Election Assistance Commission: ESS ECO 1044 approval Approval letter
U.S. Election Assistance Commission: ESS-1044 engineering change record ECO metadata, analysis, and approval attachments
Pro V&V, Inc.: ESS ECO 1044 Analysis Page 1 analysis

ESS-1055EAC approved 2019-12-19

Collapsible ballot-box change adding a ballot-trolley/binning option.

VSTL: Pro V&V, Inc.
Dossier relationship: historical ds200 family change
Field deployment: unknown

An approved accessory option does not establish use by a particular jurisdiction.

U.S. Election Assistance Commission: ES&S ECO 1055 approval Approval letter
U.S. Election Assistance Commission: ESS-1055 engineering change record ECO metadata, analysis, and approval attachments
Pro V&V, Inc.: ES&S ECO 1055 Analysis Page 1 analysis

ESS-1165EAC approved 2024-05-15

Tote-bin security gasketing intended to prevent cards or ballots from entering through hinge-area gaps; Pro V&V states the change was reviewed and functionally tested and requires no firmware/software change.

VSTL: Pro V&V, Inc.
Dossier relationship: approved for evs 6400
Field deployment: unknown

EVS 6.4.0.0 is listed as affected, but local installation is not established.

U.S. Election Assistance Commission: ECO ESS 1165 approval letter Approval letter
U.S. Election Assistance Commission: ESS-1165 engineering change record ECO metadata, analysis, and approval attachments
Pro V&V, Inc.: ES&S ECO 1165 Analysis Rev. 01 Page 1 analysis and affected systems

Findings and public status

Tests, limitations, and listing gaps

Neutral finding types replace a generic “bugs” bucket so affected versions and source scope remain visible.

test campaign resultnone reported in test campaign

Pro V&V anomaly status

The certification test report states that no anomalies occurred during the EVS 6.4.0.0 test campaign.

This is scoped to the submitted test campaign. It is not a claim that the system has no bugs or that no field incident can occur.

Pro V&V, Inc.: ES&S EVS 6.4.0.0 Certification Test Report TR-01-01-ESS-2023-01.03 Sections 3.2, 3.3, and Tables 4-1 through 4-3

public documentation gapresolved details not enumerated

Deficiencies described but not itemized

The public report says encountered deficiencies were tracked and resolutions verified as needed, but section 3.3 does not itemize those deficiencies.

Do not infer the number, severity, affected component, or field impact of non-enumerated test deficiencies.

Pro V&V, Inc.: ES&S EVS 6.4.0.0 Certification Test Report TR-01-01-ESS-2023-01.03 Sections 3.2, 3.3, and Tables 4-1 through 4-3

documented operational limitationprocedural controls recommended

Previously scanned ballot is not automatically distinguished

Washington's staff report states that EVS 6.4.0.0 cannot distinguish whether a ballot was previously scanned and describes ballot-handling and staffing controls recommended by ES&S.

This is an operational limitation and mitigation note, not evidence that duplicate scanning occurred in an election.

Washington Office of the Secretary of State: Report on the Examination of ES&S EVS 6.4.0.0 Pages 3-6

public listing statusnone listed on selected record

No advisory attachment listed on selected EAC record

The archived EAC EVS 6.4.0.0 record did not list an advisory attachment when retrieved on 2026-07-19.

This is a page-listing observation, not a claim that no advisories, bugs, vulnerabilities, service bulletins, or field incidents exist.

U.S. Election Assistance Commission: EVS 6.4.0.0 certification record Certification record and public attachments

Power evidence

Backup supply and runtime

Named power equipment is rendered exactly as sourced. Missing capacity and runtime remain explicit instead of being inferred from another device or installation.

documented partial

DS200 power / backup supply

The ES&S one-sheet confirms DS200 battery backup. The certification and state records reviewed here do not publish the battery manufacturer, model, chemistry, capacity, runtime, condition, or jurisdiction power topology.

Supply type: battery backup
Manufacturer: Not publicly confirmed
UPS model: Not publicly confirmed
Capacity: Not specified in reviewed source
Runtime: Not specified in reviewed source

Confirmed battery-backup presence must not be expanded into an inferred model, runtime, internal location, service condition, or claim about external site power.

U.S. Election Assistance Commission: EVS 6.4.0.0 Certificate and Scope of Conformance Pages 1-10, especially proprietary components on pages 6-7
Election Systems & Software: DS200 Poll Place Scanner and Tabulator One-Sheet Pages 1-2
Pro V&V, Inc.: ES&S EVS 6.4.0.0 Certification Test Report TR-01-01-ESS-2023-01.03 Sections 3.2, 3.3, and Tables 4-1 through 4-3
Washington Office of the Secretary of State: Report on the Examination of ES&S EVS 6.4.0.0 Pages 3-6

Deployment evidence

Dated jurisdiction observations

Deployment records remain at their documented grain. A system-level observation does not establish unit components, firmware, change adoption, or power configuration.

Jurisdiction	Observation	System version	Components confirmed
Jefferson County, Washington	November 2025 general election	6.4.0.0	Not established at component or unit grain
Thurston County, Washington	November 2025 general election	6.4.0.0	Not established at component or unit grain
Walla Walla County, Washington	November 2025 general election	6.4.0.0	Not established at component or unit grain
Whitman County, Washington	November 2025 general election	6.4.0.0	Not established at component or unit grain

Washington Office of the Secretary of State: Voting systems used by county County table and November 2025 version note

Jurisdiction context

Where this equipment appears in 2024 records

These jurisdiction rows are third-party administration context. A product-family name supports only that named family at the reported jurisdiction grain. A manufacturer match does not establish that a particular dossier model, component, firmware version, or certified configuration was deployed.

Manufacturer context1,509 locales40 states; vendor only, not proof of this exact model

Map resolution1,504 pinned5 source rows open at state scope

32 matching sourced recordsPage 2 of 2

ID · countymanufacturer context

Madison County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Minidoka County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Nez Perce County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Oneida County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Owyhee County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Payette County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Power County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Shoshone County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Teton County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Twin Falls County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Valley County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

ID · countymanufacturer context

Washington County

Reported system: ES&S ExpressVote
Vendor: ES&S
Equipment type: Optical Scan

The normalized source row names ES&S; it does not identify this dossier's exact model or configuration.

Open this jurisdiction on the equipment map Open Verified Voting Verifier source

Provenance

Archived source manifest

Each local artifact is checked against its reviewed SHA-256 during catalog validation.

federal known exploited vulnerability catalog

Known Exploited Vulnerabilities Catalog

Cybersecurity and Infrastructure Security Agency

41d27023a5912a49ca2b06370550fa6da50e35794c269766a6332618d82f243edata/equipment-sources/cisa-known-exploited-vulnerabilities-2026-07-16.jsonReviewed revision: cisa-kev-catalog@2026-07-20Open official source

federal official