VxSuite TDP - v4
  • System Overview
    • Election Package
      • VxSuite Election Definition
      • Ballot Definition CDF
    • Hand Marked Ballots
    • Machine Marked Ballots
    • Cast Vote Records
    • VxScan Polls Reports
    • VxAdmin Results Exports
      • Tally Reports
      • Ballot Count Reports
      • CSV Exports
      • Write-In Adjudication Report
      • CDF ERR Export
    • Software Overview
    • User Roles
    • VxAdmin Function
    • VxCentralScan Function
    • VxAdmin & VxCentralScan Hardware
    • VxScan Function
    • VxScan Hardware
    • VxMark Function
    • VxMark Hardware
    • Ballot Interpretation
    • Diagnostics
    • Signed Hash Validation
  • System Performance & Specifications
    • Supported Voting Variations & Languages
    • System Limits
      • Maximum Tabulation Rate
    • Paper Ballot Specifications
    • Reliably Detectable Marks
    • Processing Capabilities
  • System Security, Auditing & Logging
    • System Security Architecture
      • Access Control
      • Artifact Authentication
        • Hashing of Continuously Exported Cast Vote Records
        • Preserving Voter Privacy
      • System Integrity
      • Networking
      • Password and Credential Policies
      • Defense-in-Depth and Least Privilege
      • Cryptography
    • Physical Security
    • Procedural and Operational Security
    • Audit Procedure
    • Logging
    • Vulnerability Management
    • Risk Assessment
    • Hardware Criticality and Supplier Analysis
  • Software Installation
    • Trusted Build
      • Build Machine Configuration
        • Installing Debian 12 on VxBuild
      • Online Phase
      • Offline Phase
      • Final Configuration
        • Secure Boot Signing
      • Hash/Checksum Verification of Dependencies
      • Virt Manager - Network Access & Troubleshooting
    • Imaging Machines
      • Preparing USB Drives for Imaging
      • Imaging
      • Basic Configuration Wizard
      • Verifying the Image Installed on a Machine
      • Software Installation Record Creation
  • System Operations & Training Manual
  • System Inspection & Logic and Accuracy Testing
  • System Maintenance Manual
  • Usability & Accessibility
  • Audio Visual & Display Screen Settings
  • Quality Assurance Manual
  • Warranty Model
  • Public Documents
Powered by GitBook
On this page
  • Overview
  • Laptop
  • VxAdmin
  • VxCentralScan
  • Bill of Materials
  • Shared Components (Laptop & Accessories)
  • VxAdmin Components (Printer)
  • VxCentralScan Components (Scanner)
  • Laptop Specification
  • Discussion of Critical Components
Export as PDF
  1. System Overview

VxAdmin & VxCentralScan Hardware

PreviousVxCentralScan FunctionNextVxScan Function

Last updated 29 days ago

Overview

Laptop

VxAdmin and VxCentralScan are both laptops that connect to peripherals as needed. The laptop is a .

The relevant hardware interfaces are:

  • Smart Card Reader - Enables reading and writing to smart cards, which is the basis for authentication in VxSuite

  • USB Ports - Allows connecting to the peripherals for scanning or printing

While not strictly necessary, VxAdmin and VxCentralScan are bundled with a mouse and a USB hub for ease of use. A USB A-B cable is included to connect to the peripherals.

VxAdmin

VxAdmin connects to a printer for the purposes of printing reports. The printer includes an RJ45 (ethernet) port which is blocked by a port blocker because network connectivity is not required by the system.

VxCentralScan

VxCentralScan connects to a batch scanner for batch scanning. The scanner is either the smaller Ricoh fi-8170 or the larger Ricoh fi-7600. Ballots are loaded into the hopper and then, after a scan is triggered from the application, the scanner processes the ballots one-by-one, sending images to the application for interpretation.

Both batch scanners can be used with Ricoh imprinters (not pictured) which allow printing an identifier on each ballot as it's exiting the scanner, which can be useful for certain types of post-election audits.

The batch scanner is powered through an APC BN1500M2 UPS (Uninterruptible Power Supply) to ensure that the scanner can operate in variable power environments.

The fi-8170 includes an RJ45 (ethernet) port which is blocked by a port blocker because network connectivity is not required by the system.

Bill of Materials

Shared Components (Laptop & Accessories)

Manufacturer
Component
Mfr. Part Number
Criticality

HP

Elitebook 840 11" G11 Laptop

B43P6UP#ABA

High

Tripp Lite

4-Port Ultra-Slim USB Hub

U360-004-SLIM

Medium

Logitech

B100 Mouse

910-006061

Medium

Monoprice

USB-A to USB-B 2.0 6ft Cable

5438

Medium

VxAdmin Components (Printer)

Manufacturer
Component
Mfr. Part Number
Criticality

HP

LaserJet Pro 4001dn Printer

2Z600F#BGJ

Medium

Lindy

RJ45 Port Blocker

40471

Low

VxCentralScan Components (Scanner)

VxCentralScan can be used with either the Ricoh fi-8170 or the Ricoh fi-7600, but does not need both. Each scanner can be paired with one of the two imprinters listed below.

Manufacturer
Component
Mfr. Part Number
Criticality

Ricoh

fi-8170 Small Desktop Scanner

PA03810-B055

High

Ricoh

fi-819PRB Imprinter (for fi-8170)

PA03810-D201

Medium

Ricoh

fi-7600 Large Desktop Scanner

PA03740-B505

High

Ricoh

fi-760PRB Imprinter (for fi-7600)

PA03740-D101

Medium

APC

Uninterruptible Power Supply

BN1500M2

Medium

Lindy

RJ45 Port Blocker

40471

Low

Laptop Specification

The laptop is a custom configuration of the widely available HP Elitebook 840 14" G11 laptop. B43P6UP#ABA is the HP SKU of the VotingWorks configuration, which includes the following:

Component
Configuration

Processor

Intel® Core™ Ultra 5 Processor 125U

Memory (RAM)

8GB (1x8GB) DDR5 5600 SODIMM Memory

Storage (SSD)

256GB PCIe NVMe Solid State Drive

Display

14" WUXGA UWVA LED (300 nits)

Battery

56Wh Capacity

Webcam

None

Near Field Communication

None

WWAN (Cellular)

None

WLAN (Wi-Fi)

None

Fingerprint Sensor

None

Smart Card Reader

Included

Country of Origin

TAA Designated

Discussion of Critical Components

As listed in the bill of materials above, the high criticality components are as follows:

  • HP Elitebook 840 11" G11 - As the processor and data store for ballot data and other tallies, the laptops are one of the most critical components in the entire system. HP is the only manufacturer. VotingWorks is an official OEM partner of HP in order to work closely together to ensure the quality and configuration of the laptops.

  • Ricoh fi-7600 & fi-8170 - As the source of ballot images for VxCentralScan, the Ricoh scanners are highly sensitive and critical components.

The medium criticality components and the reasons for their classification are as follows:

  • Tripp Lite Ultra Slim USB Hub - Manages flow of data between laptop and peripherals.

  • Logitech B100 Mouse - Does not directly handle election data but does plug into a USB port, thus it could still pose a USB attack vector.

  • Monoprice USB A-B Cable - Manages flow of data between laptop and peripherals.

  • HP LaserJet Pro 4001dn - The VxAdmin printer is responsible for printing reports from VxAdmin and therefore handles highly sensitive election information. All reports from VxAdmin can be exported as PDFs and printed elsewhere, so it is not strictly necessary for the operation of the system and thus is not the highest criticality.

  • Ricoh fi-760PRB & fi-819PRB - The imprinters that pair with the Ricoh scanners are not involved in generating ballot data, so they cannot influence the interpretation of ballots when used according to instructions. The imprinted identifiers are important for post-election audits, however, so the imprinters are security-sensitive components.

All components for VxAdmin and VxCentralScan are commercial-off-the-shelf (COTS) components. Data sheets and related documentation are available .

in the documentation repository
custom configured HP Elitebook 840 14" G11
Laptop keyboard and screen
Laptop ports
VxAdmin fully connected with mouse, hub, charger, USB cable, and printer
VxCentralScan fully connected with mouse, hub, charger, USB cable, scanner (fi-8170), and power backup