EcoFlowInc. Model: EF-MT-H10-1 FCC ID: 2A2P9-MTH101, FRN: 0031193519, IC: 27618-MTH101 Subject:SoftwaresecurityrequirementsforUNIIdevice. TheinformationwithinthissectionoftheOperationalDescriptionistoshowcomplianceagainstthe SoftwareSecurityRequirementslaidoutwithinKDB594280D02UNIIDeviceSecurityv01r03. GeneralDescription 1.Describehowanysoftware/firmwareupdate willbeobtained,downloaded,andinstalled. Softwarethatisaccessedthroughmanufacturers websiteordevicesmanagementsystem,must describethedifferentlevelsofsecurity. 2.Describealltheradiofrequencyparameters thataremodifiedbyanysoftware/firmware withoutanyhardwarechanges.Arethese parametersinsomewaylimited,suchthat,itwill notexceedtheauthorizedparameters?
There is no downloadable software provided by the manufacturer that can modify critical radio transmitter parameters. All critical parameters are programmed in OTP memory at the factory and cannot be modified by third parties. There are no RF parameters that can by modified. All RF parameters are programmed in OTP memory at the factory and cannot be modified by third parties. 3.Describeindetailtheauthenticationprotocols thatareinplacetoensurethatthesourceofthe software/firmwareislegitimate.Describeindetail howthesoftwareisprotectedagainst modification. 4.Describeindetailtheverificationprotocolsin placetoensurethatinstalledsoftware/firmwareis legitimate. The NVRAM of the module can only be written once and cannot be written after delivery. The NVRAM of the module can only be written once and cannot be written after delivery. 5GWiFiDeclarationLetter EcoFlowInc. The device can only act as client mode. The device cannot act as a master in all bands. Third parties are not approved to operate in any manner that is violation of the certification in the U.S and Canada. The firmware is programmed at the factory and cannot be modified by third parties. Default mode is always FCC and ISED compli-
ant, and the NVRAM of the module can only be written once and cannot be written after deliv-
ery. 5.Foradevicethatcanbeconfiguredasamaster andclient(withactiveorpassivescanning),explain howthedeviceensurescomplianceforeach mode?Inparticularifthedeviceactsasmasterin somebandofoperationandclientinanother;how iscomplianceensuredineachbandofoperation?
3rdPartyAccessControl 1.Explainifanythirdpartieshavethecapabilityto operateaU.S.solddeviceonanyotherregulatory domain,frequencies,orinanymannerthat mayallowthedevicetooperateinviolationofthe devicesauthorizationifactivatedintheU.S. 2.Describe,ifthedevicepermitsthirdparty softwareorfirmwareinstallation,what mechanismsareprovidedbythemanufacturerto permitintegrationofsuchfunctionswhile ensuringthattheRFparametersofthedevice cannotbeoperatedoutsideitsauthorizationfor operationintheU.S.Inthedescriptioninclude whatcontrolsand/oragreementsarein placewithprovidersofthirdpartyfunctionalityto ensurethedevicesunderlyingRFparametersare unchangedandhowthemanufacturer verifiesthefunctionality. 3.ForCertifiedTransmittermodulardevices, describehowthemodulegranteeensuresthat hostsmanufacturesfullycomplywiththese softwaresecurityrequirementsforUNIIdevices. Ifthemoduleiscontrolledthroughdriversoftware loadedinthehost,describehowthedriversare controlledandmanagedsuchthatthemodular transmitterparametersarenotmodifiedoutside thegrantofauthorization. SOFTWARECONFIGURATIONDESCRIPTION 1. To whom is the UI accessible? (Professional installer,enduser,other.) Professional installer. a)Whatparametersareviewabletothe professionalinstaller/enduser?
Wireless network, Bluetooth connection to peripheral (e.g. remote control) 5GWiFiDeclarationLetter EcoFlowInc. b)Whatparametersareaccessibleormodifiable totheprofessionalinstaller?
i)Aretheparametersinsomewaylimited,sothat theinstallerswillnotenterparametersthat exceedthoseauthorized?
ii) What controls exist that the user cannot operatethedeviceoutsideitsauthorizationinthe U.S.?
Connectiontospecificwirelessnetwork. The module micro-code reads the parameters from the Module OTP memory. These parameters cannot be modified by SW driver. Default mode is always FCC and ISED compliant. Other country modes cannot be activated without writing in the drive's bin files. However, bin files can only be modified at the factory c)Whatconfigurationoptionsareavailabletothe enduser?
Wireless network names, encryption methods, and wireless network passwords. i)Aretheparametersinsomewaylimited,sothat theinstallerswillnotenterparametersthat exceedthoseauthorized?
ii)Whatcontrolsexistthattheusercannotoperate thedeviceoutsideitsauthorizationinthe The module micro-code reads the parameters from the Module OTP memory. These parameters cannot be modified by SW driver. Default mode is always FCC and ISED compliant. Other country modes cannot be activated without writing in the drive's bin files. However, bin files can only be modified at the factory U.S.?
Yes d)Isthecountrycodefactoryset?Canitbe changedintheUI?
Default country code is set in the factory and no UI is provided for modification. i) If so, what controls exist to ensure that the devicecanonlyoperatewithinitsauthorizationin theU.S.?
N/A e)Whatarethedefaultparameterswhenthe deviceisrestarted?
Always FCC and ISED compliant. 2.Cantheradiobeconfiguredinbridgeormesh mode?Ifyes,anattestationmayberequired. FurtherinformationisavailableinKDBPublication 905462D02. No The device can only act in client mode. The device cannot act as a master in all bands. 3.Foradevicethatcanbeconfiguredasamaster andclient(withactiveorpassivescanning),ifthisis userconfigurable,describewhatcontrolsexist, withintheUI,toensurecomplianceforeach mode. Ifthedeviceactsasamasterinsomebandsand clientinothers,howisthisconfiguredtoensure compliance?
5GWiFiDeclarationLetter EcoFlowInc. Yours sincerely, Name: Vicky Guan Title: R&D Engineer Date: 2023-12-04 5GWiFiDeclarationLetter