Intel Dual Band Wireless-AC 8260 Software Security Letter Cover Letter(s)

FCC ID: PD98260D2 SoftwareSecurityDescriptionKDB594280D02v01r02SectionII GeneralDescription 1. Describehowanysoftware/firmwareupdatewillbe obtained,downloaded,andinstalled.Softwarethatis accessedthroughmanufacturerswebsiteordevices managementsystem,mustdescribethedifferentlevels ofsecurity. There is no downloadable software provided by the manufacturer that can modify critical radio transmitter parameters. All critical parameters are programmed in OTP memory at the factory and cannot be modified or overridden by third parties. 2. Describealltheradiofrequencyparametersthatare modifiedbyanysoftware/firmwarewithoutany hardwarechanges.Aretheseparametersinsomeway limited,suchthat,itwillnotexceedtheauthorized parameters?

3. Describeindetailtheauthenticationprotocolsthat areinplacetoensurethatthesourceofthe software/firmwareislegitimate.Describeindetailhow thesoftwareisprotectedagainstmodification. There are no rf parameters that can be modified. All rf parameters are programmed in OTP memory at the factory and cannot be modified or overridden by third parties. The firmware is programmed at the factory and cannot be modified by third parties. 4. Describeindetailtheverificationprotocolsinplace toensurethatinstalledsoftware/firmwareislegitimate. The firmware is programmed at the factory and cannot be modified by third parties. 5. Describeindetailanyencryptionmethodsusedto supporttheuseoflegitimatesoftware/firmware. The firmware is programmed at the factory and cannot be modified by third parties therefore no encryption is necessary. 6. Foradevicethatcanbeconfiguredasamasterand client(withactiveorpassivescanning),explainhowthe deviceensurescomplianceforeachmode?Inparticular ifthedeviceactsasmasterinsomebandofoperation andclientinanother;howiscomplianceensuredin eachbandofoperation?

This is a client module only. ThirdPartyAccessControl 1. Explainifanythirdpartieshavethecapabilityto operateaUSsolddeviceonanyotherregulatory domain,frequencies,orinanymannerthatisin violationofthecertification. 2. WhatpreventsthirdpartiesfromloadingnonUS versionsofthesoftware/firmwareonthedevice?

Describeindetailhowthedeviceisprotectedfrom flashingandtheinstallationofthirdpartyfirmware suchasDDWRT.(See,forexample,http://www.dd Third parties do not the capability to operate in any manner that is violation of the certification in the U.S. RF parameters are programmed into OTP memory at the factory and cannot be reprogrammed or re-flashed by third parties. wrt.com/) 3. ForCertifiedTransmittermodulardevices,describe howthemodulegranteeensuresthathosts manufacturesfullycomplywiththesesoftwaresecurity requirementsforUNIIdevices.Ifthemoduleis controlledthroughdriversoftwareloadedinthehost, describehowthedriversarecontrolledandmanaged suchthatthemodulartransmitterparametersarenot modifiedoutsidethegrantofauthorization. FCC ID: PD98260D2 There are no rf parameters that can be modified. All rf parameters are programmed in OTP memory at the factory and cannot be modified or overridden by third parties. The module is not controlled by driver software on the host and cannot override critical rf parameters stored in module OTP memory. SOFTWARECONFIGURATIONDESCRIPTIONKDB594280D02v01r02SectionIII USERCONFIGURATIONGUIDE 1. TowhomistheUIaccessible?(Professionalinstaller, enduser,other.) No UI provided. a) Whatparametersareviewabletotheprofessional None installer/enduser?

b) Whatparametersareaccessibleormodifiableto None theprofessionalinstaller?

i) Aretheparametersinsomewaylimited,sothat theinstallerswillnotenterparametersthatexceed thoseauthorized?

The module micro-code reads the parameters from the module OTP memory. These parameters cannot be modified or overridden by sw drivers. ii) Whatcontrolsexistthattheusercannotoperate thedeviceoutsideitsauthorizationintheU.S.?

Default mode is always FCC compliant. Other country modes cannot be activated without receiving three independent country codes from different APs, otherwise remains in FCC default mode (always FCC compliant) c) Whatconfigurationoptionsareavailabletothe None enduser?

i) Aretheparametersinsomewaylimited,sothat theinstallerswillnotenterparametersthatexceed thoseauthorized?

The module micro-code reads the parameters from the module OTP memory. These parameters cannot be modified or overridden by sw drivers. ii) Whatcontrolsexistthattheusercannotoperate thedeviceoutsideitsauthorizationintheU.S.?

d) Isthecountrycodefactoryset?Canitbechanged intheUI?

i) Ifso,whatcontrolsexisttoensurethatthe devicecanonlyoperatewithinitsauthorizationinthe Default mode is always FCC compliant. Other country modes cannot be activated without receiving three independent country codes from different APs, otherwise remains in FCC default mode (always FCC compliant) Default country code is set in the factory and no UI is provided for modification. Programmed for default mode which is always FCC compliant. Always set for default for all start-ups, resets, timeouts or other host or network events. FCC ID: PD98260D2 U.S.?

e) Whatarethedefaultparameterswhenthedevice Always FCC compliant isrestarted?

2. Cantheradiobeconfiguredinbridgeormeshmode?

Ifyes,anattestationmayberequired.Further informationisavailableinKDBPublication905462D02. No 3. Foradevicethatcanbeconfiguredasamasterand client(withactiveorpassivescanning),ifthisisuser configurable,describewhatcontrolsexist,withintheUI, toensurecomplianceforeachmode.Ifthedeviceacts asamasterinsomebandsandclientinothers,howis thisconfiguredtoensurecompliance?

4. Foradevicethatcanbeconfiguredasdifferenttypes ofaccesspoints,suchaspointtopointorpointto multipoint,andusedifferenttypesofantennas, describewhatcontrolsexisttoensurecompliancewith applicablelimitsandtheproperantennaisusedfor eachmodeofoperation.(SeeSection15.407(a)) This is a client device. This device is not an access point. Name and surname of applicant (or authorized representative):

Date: May 11, 2016 Signature: