Intel Wi-Fi 6E AX211 Software Security Letter Cover Letter(s)

TheinformationprovidedinthisdocumentappliestothefollowingIntelWirelessAdapterModules. Model FCCID AX211D2WL PD9AX211D2L SoftwareSecurityDescriptionKDB594280D02v01r03SectionII GeneralDescription 1. Describehowanysoftware/firmwareupdatewillbe obtained,downloaded,andinstalled.Softwarethatis accessedthroughmanufacturerswebsiteordevices managementsystem,mustdescribethedifferentlevels ofsecurityasappropriate. There is no downloadable software provided by the manufacturer that can modify critical radio transmitter parameters. All critical parameters are programmed in OTP memory at the factory and cannot be modified or overridden by third parties. 2. Describetherfparametersthataremodifiedbyany software/firmwarewithoutanyhardwarechanges.Are theseparametersinsomewaylimited,suchthat,itwill notexceedtheauthorizedRFcharacteristics?

There are no rf parameters that can be modified. All rf parameters are programmed in OTP memory at the factory and cannot be modified or overridden by third parties. 3. Describeindetailtheauthenticationprotocolsthat areinplacetoensurethatthesourceoftheRFrelated software/firmwareislegitimate.Describeindetailhow thesoftwareisprotectedagainstmodification. The firmware is programmed at the factory and cannot be modified by third parties. 4. Describeindetailanyencryptionmethodsusedto supporttheuseoflegitimateRF relatedsoftware/firmware. The firmware is programmed at the factory and cannot be modified by third parties therefore no encryption is necessary. 5. Foradevicethatcanbeconfiguredasamasterand client(withactiveorpassivescanning),explainhowthe deviceensurescomplianceforeachmode?Inparticular ifthedeviceactsasmasterinsomebandofoperation andclientinanother;howiscomplianceensuredin eachbandofoperation?

This is a client module only. ThirdPartyAccessControl 1. Explainifanythirdpartieshavethecapabilityto operateaUSsolddeviceonanyotherregulatory domain,frequencies,orinanymannerthatisin Third parties do not the capability to operate in any manner that is violation of the certification in the U.S. violationofthedevicesauthorizationifactivatedinthe U.S.. 2. Describe,ifthedevicepermitsthirdpartysoftwareor firmwareinstallation,whatmechanismsareprovidedby themanufacturertopermitintegrationofsuch functionswhileensuringthattheRFparametersofthe devicecannotbeoperatedoutsideitsauthorizationfor operationintheU.S.Inthedescriptionincludewhat controlsand/oragreementsareinplacewithproviders ofthirdpartyfunctionalitytoensurethedevices underlyingRFparametersareunchangedandhowthe manufacturerverifiesthefunctionality. 3. ForCertifiedTransmittermodulardevices,describe howthemodulegranteeensuresthathosts manufacturesfullycomplywiththesesoftwaresecurity requirementsforUNIIdevices.Ifthemoduleis controlledthroughdriversoftwareloadedinthehost, describehowthedriversarecontrolledandmanaged suchthatthemodulartransmitterparametersarenot modifiedoutsidethegrantofauthorization. RF parameters are programmed into OTP memory at the factory and cannot be reprogrammed or re-flashed by third parties. There are no rf parameters that can be modified. All rf parameters are programmed in OTP memory at the factory and cannot be modified or overridden by third parties. The module is not controlled by driver software on the host and cannot override critical rf parameters stored in module OTP memory. SOFTWARECONFIGURATIONDESCRIPTIONKDB594280D02v01r02SectionIII USERCONFIGURATIONGUIDE 1. Describetheuserconfigurationspermittedthrough theUI.Ifdifferentlevelsofaccessarepermittedfor professionalinstallers,systemintegratorsorendusers, describethedifferences. No UI provided. a) Whatparametersareviewableandconfigurableby None differentparties?

b) Whatparametersareaccessibleormodifiableto None theprofessionalinstallerorsystemintegrator?

i) Aretheparametersinsomewaylimited,sothat theinstallerswillnotenterparametersthatexceed thoseauthorized?

The module micro-code reads the parameters from the module OTP memory. These parameters cannot be modified or overridden by sw drivers. ii) Whatcontrolsexistthattheusercannotoperate thedeviceoutsideitsauthorizationintheU.S.?

Default mode is always FCC compliant. Other country modes cannot be activated without receiving three independent country codes from different APs, otherwise remains in FCC default mode (always FCC compliant) c) Whatparametersareaccessibleormodifiableby None theenduser?

i) Aretheparametersinsomewaylimited,sothat The module micro-code reads the parameters from the theinstallerswillnotenterparametersthatexceed thoseauthorized?

module OTP memory. These parameters cannot be modified or overridden by sw drivers. ii) Whatcontrolsexistthattheusercannotoperate thedeviceoutsideitsauthorizationintheU.S.?

Default mode is always FCC compliant. Other country modes cannot be activated without receiving three independent country codes from different APs, otherwise remains in FCC default mode (always FCC compliant) d) Isthecountrycodefactoryset?Canitbechanged intheUI?

Default country code is set in the factory and no UI is provided for modification. i) Ifitcanbechanged,whatcontrolsexisttoensure thatthedevicecanonlyoperatewithinitsauthorization intheU.S.?

Programmed for default mode which is always FCC compliant. Always set for default for all start-ups, resets, timeouts or other host or network events. e) Whatarethedefaultparameterswhenthedevice Always FCC compliant isrestarted?

2. Cantheradiobeconfiguredinbridgeormeshmode?

Ifyes,anattestationmayberequired.Further informationisavailableinKDBPublication905462D02. No 3. Foradevicethatcanbeconfiguredasamasterand client(withactiveorpassivescanning),ifthisisuser configurable,describewhatcontrolsexist,withintheUI, toensurecomplianceforeachmode.Ifthedeviceacts asamasterinsomebandsandclientinothers,howis thisconfiguredtoensurecompliance?

4. Foradevicethatcanbeconfiguredasdifferenttypes ofaccesspoints,suchaspointtopointorpointto multipoint,andusedifferenttypesofantennas, describewhatcontrolsexisttoensurecompliancewith applicablelimitsandtheproperantennaisusedfor eachmodeofoperation.(SeeSection15.407(a)) This is a client device. This device is not an access point. Name and surname of applicant (or authorized representative):

Date: October 10, 2018 Signature:

Steven C. Hackett Product Regulations Enginee Intel Mobile Communicationsr