Gaming Laboratories International

Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

GLI Las Vegas

The recipient, by its acceptance of
this report or analysis, will be
deemed to have acknowledged and
agreed to all of the “terms and
conditions” set forth below. If the
recipient does not agree to all of
such terms and conditions, GLI
withdraws the certification provided
or analysis established by this report
and the recipient must immediately
return to GLI all copies of this
report and make no reference to this
report for any purpose at any time.
Las Vegas Service Center
Issuing GLI Europe B.V.
Evaluating 7160 Amigo Street
Laboratory Laboratory Las Vegas, Nevada
89119
USA
Aristocrat Technologies Australia Pty Ltd.
Building A, Pinnacle Office Park
Client 85 Epping Road
North Ryde NSW 2113
Australia
- Paragraph 3 of Article 80a of the Consolidated Gaming Act, Official Gazette of the
Republic of Slovenia, No. 14/2011 dated 4th March 2011.
- Regulation 59/2008 dated 13th June 2008 - (2491) - Regulation on Technical
Requirements for Gaming Devices and on Conformity Assessment Procedure.
- Regulation 88/2009 dated 5th November 2009 - (3875) - Regulation Concerning
the Modifications and Amendment on Technical Requirements for Gaming Devices
and on Conformity Assessment Procedure.
Tested against - Regulation 37/2011 dated 20th May 2011 – (1848) – Regulation Concerning the
Requirements Modifications and Amendment on Technical Requirements for Gaming Devices and
on Conformity Assessment Procedure.
- Regulation 109/2012 dated 31st December 2012 – (4359) – Regulation amending
the regulation on the conditions to be met by a Gambling Organizer.
- Regulation 38/2014 dated 30th May 2014 – (4120) – Regulation Concerning the
Modification of the Regulation on Technical Requirements for Gaming Devices and
on Conformity Assessment Procedure.
Jurisdiction Slovenia
Aristocrat Technologies Australia Pty Ltd.
Building A, Pinnacle Office Park
Manufacturer 85 Epping Road
North Ryde NSW 2113
Australia
Aristocrat Technologies Australia Pty Ltd.
Building A, Pinnacle Office Park
Applicant 85 Epping Road
North Ryde NSW 2113
Australia
Product Name CFPRG, FDPRG
Product Style Verification Tool
Description of the cfprg.exe v26, fdprg.exe v28
th
Product Tested As requested per manufacturer’s letter dated 17 September 2014.
Date Received / Date 17th September 2014 / 7th November 2014
Completed
Evaluation Period 17th September 2014 / 31st October 2014
- N/A
Result (See Comments and Conditions, and Jurisdictional Requirements on page 2)
- Comments/Conditions
- Manufacturer’s Documentation
- Hardware Product Details
- Software Product Details
- Applied Tests
Sections - Descriptions
- Product Characteristics
- Jurisdictional Requirements
- Annex
- Affirmative Statement of Compliance
- Terms and Conditions
Internal Reference: MO-135-ARI-14-01
Modified 11 August 2014 SLO – LC135 Page 1 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Comments/Conditions
Comments

As from 1st July 2006, it is the manufacturer’s responsibility to ensure that their product is RoHS compliant with current EU directives.

The program GLI Verify® V7.0 was used to generate the SHA-1 and CDCK signatures listed in the Software Product Details section of this
Report.

GLI Verify® - Verification Procedure:

1. Open GLI Verify® Version 7.0.
2. Select the ‘File’ radio button.
3. Click on the ‘Browse’ button and specify the file you wish to signature.
4. Click the ‘Verify’ button
5. The program will generate a CDCK and SHA-1 signature and display the results in the center window

Only the verification functionality of the cfprg.exe and fdprg.exe applications has been tested.

To the submitter of this Report (Reference Number: 2014ARI1047LC135) below listed items will be provided:
· Binaries.

Conditions

There are not conditions applicable to this Report.

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 2 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Manufacturer’s Documentation
Document NO Document Title Date of Issue

N/A Manufacturer’s summission letter 17th September 2014

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 3 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Hardware Product Details

There are no Hardware Product Details applicable to this Report

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 4 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Software Product Details

Media Kobetron SHA-1
Product ID Function Position Size Kobetron CDCK RTP% Report Number
Type Extended Signature
E4E938B2
3932C06C
cfprg.exe V26 File Verification Tool N/A 9.71MB N/A N/A 6E9C 1F2C7037 N/A •
7CD116FC
6EF12448

D625FF8C
BF020833
fdprg.exe V28 File Verification Tool N/A 9.25MB N/A N/A 6F2C DDA4331C N/A •
F4408A99
CC5D11D1

• The tests performed are listed in the Applied Tests section of this Report.

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 5 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Applied Tests
Product ID Test Performed Reference NO Results Additional Details

cfprg.exe v26 Internal Reference:

Jurisdictional Regulations Review WI TL03_02 Pass
fdprg.exe v28 MO-135-ARI-14-01

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 6 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Product Description
Product ID Characteristics
‘CFPRG.exe’ is a Windows XP application created by Aristocrat to verify and create Compact Flash cards. This tool
runs from the command line and requires a Compact Flash Reader attached to the PC.
The command ‘cfprg.exe -r0 –H’ will calculate the HMAC SHA-1 signatures of the 5 components included in the
Compact Flash card. This command will show the binary image name (MBR, Bootldr, Linux OS, Platform and
game00) with its version and its signature.

HMAC SHA-1 Field Verification Procedure:

cfprg.exe v26
1. Using the manufacturer supplied application tool ‘cfprgh.exe’, a card reader, and a Windows based PC,
HMAC SHA-1 signatures can be obtained for the individual components of the Compact Flash.
2. Plug the card reader into a PC USB connector and insert the Compact Flash into the card reader.
3. Open a DOS box on the PC and go to the designated directory where the application tool ‘cfprg.exe’ is
located.
4. Execute the following command in the DOS box: cfprg –r0 –H.
5. The output hashes of the individual components will be displayed on the PC in the DOS box.
‘FDPRG.exe’ is a Windows XP application created by Aristocrat to verify and create SSD drives and CFast cards. This
tool runs from the command line and requires an SSD or CFast Reader attached to the PC.
The command ‘fdprg.exe -d0 –H’ will calculate the HMAC SHA-1 signatures of the 5 components included in the SSD
drive or in the Compact Flash card. This command will show the binary image name (MBR, Bootldr, Linux OS,
Platform and game00) with its version and its signature.

HMAC SHA-1 Field Verification Procedure:

fdprg.exe v28 1. Using the manufacturer supplied application tool ‘fdprg.exe’, a SSD or CFast reader, and a Windows
based PC, HMAC SHA-1 signatures can be obtained for the individual components of the SSD/CFast
card.
2. Connect the SSD/CFast card to a PC.
3. Open a DOS box on the PC and go to the designated directory where the application tool ‘fdprg.exe’ is
located.
4. Execute the following command in the DOS box: fdprg –d0 –H.
5. The output hashes of the individual components will be displayed on the PC in the DOS box.

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 7 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Jurisdictional Requirements
N/A - There are no technical requirements applicable to this evaluation report. However, Verification tools “cfprg.exe v26” and ”fdprg.exe v28” can
be used to ensure the compliance of the jurisdictional requirements with regards to checking the authenticity of the software.

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 8 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Affirmative Statement of Compliance

GLI hereby affirms that all testing, verifications, evaluations and determinations of compliance were performed in accordance with the requirements in
our scope of accreditation. The item(s) listed in the “Description of the Product Tested” row on the first page of this Report were evaluated for
compliance in accordance with the following legislations:

Paragraph 3 of Article 80a of the Consolidated Gaming Act, Official Gazette of the Republic of Slovenia, No. 14/2011 dated 4 th March 2011.
Regulation 59/2008 dated 13th June 2008 - (2491) - Regulation on Technical Requirements for Gaming Devices
and on Conformity Assessment Procedure.
Regulation 88/2009 dated 5th November 2009 - (3875) - Regulation Concerning the Modifications and Amendment on Technical Requirements for
Gaming Devices and on Conformity Assessment Procedure.
Regulation 37/2011 dated 20th May 2011 – (1848) – Regulation Concerning the Modifications and Amendment on Technical Requirements for
Gaming Devices and on Conformity Assessment Procedure.
Regulation 109/2012 dated 31st December 2012 – (4359) – Regulation amending the regulation on the conditions to be met by a Gambling Organizer.
Regulation 38/2014 dated 30th May 2014 – (4120) – Regulation Concerning the Modification of the Regulation on Technical Requirements for
Gaming Devices and on Conformity Assessment Procedure.

Please refer to the Jurisdictional Requirements section for specific details concerning our evaluation of the product(s) referenced herein in
accordance with the applicable regulatory requirements. Please contact our office at +31 252 529 838 if you have any questions concerning
the information in this Report.

Tested by: Hugo Lluelles

Reviewed by: Robert Wuest

Technical Evaluation authorized by:

John van Schaijk

Technical Director

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 9 of 10
 Gaming Laboratories International
Evaluation Report
Report No 2014ARI1047LC135
Date 7 November 2014

Terms and Conditions

This Report is issued solely for the benefit of the Client for use only for and limited to the specific jurisdiction or standards referenced in the
Report. This Report may not be relied upon for any reason by any person or entity other than the Client including, but not necessarily limited to, the
manufacturer or developer of the items, a non-GLI Laboratory, or a Regulator not named in the Report (“a Third Party”).
Any Report produced by GLI is proprietary to GLI and the Client, because it contains confidential information of commercial value, the
exposure of which to third parties could adversely affect both GLI and the Client. Accordingly, such confidential information is supplied in
confidence, on the strict condition that no part of it will be reprinted or reproduced or transmitted to any parties external to the original contract
without the prior written approval of the Parties. In particular, it will not be exposed to any person or organization which may be in competition with
any of the Parties without the prior written approval of that Party. The testing performed by GLI is proprietary to GLI and/or various regulators. No
third party may use, rely or refer to a GLI evaluation report, test report, certification document or test results without written permission of GLI and
the respective regulator. Notwithstanding the above, the Parties may disclose confidential information if required to do so by regulatory agencies,
pursuant to the laws and regulations of an applicable jurisdiction or by an order of a properly designated Court of Law in a relevant jurisdiction.
However, in either case the Parties agree to immediately notify the other party of such a request.
Notwithstanding the above, any regulator may reprint, reproduce and transmit any document or information to any party that the regulator, in
their sole discretion, deems appropriate.
This Report shall not be reproduced, except in full, without the approval of GLI Europe and the Recipient(s).
Any certification established by this Report applies exclusively to tests conducted on the specific items submitted, by the manufacturer or
any other party, which are described on page one of this Report. It is the responsibility of the manufacturer and/or developer of the items submitted to
apply for, obtain and maintain all necessary gaming licensure in each jurisdiction in which they do business, including state and tribal jurisdictions,
where applicable. Any electrostatic test methods used by GLI Europe are intended only to simulate techniques observed in the field being used to
attempt to disrupt the integrity of Electronic Gaming Devices. During the course of the testing, GLI Europe checks for marks, symbols or documents
indicating that a device has undergone product safety or RoHS compliance testing, if required. GLI Europe also performs a cursory review of
information accompanying the items submitted, where possible and when provided, for evidence that the items have undergone compliance testing for
Electromagnetic Interference (EMI), Radio Frequency Interference (RFI), Magnetic Interference, Liquid Spills, Power Fluctuations, Electrostatic
Immunity, Electromagnetic Compatibility and Environmental conditions. Compliance with any such regulations related to the aforementioned testing
is the sole responsibility of the manufacturer and/or developer of the items submitted; GLI Europe accepts no responsibility, makes no representations
and disclaims any liability with respect to all such non-gaming testing. Details of the testing methods used, excluded testing, and actual data showing
the testing results are available to the Recipient(s) upon written request.
GLI EUROPE WARRANTS TO THE RECIPIENT THAT ALL SERVICES PROVIDED BY GLI EUROPE HEREUNDER HAVE BEEN
PERFORMED IN ACCORDANCE WITH ESTABLISHED AND RECOGNIZED TESTING PROCEDURES AND WITH REASONABLE CARE
IN ACCORDANCE WITH APPLICABLE LAWS. GLI EUROPE DOES NOT MAKE, AND EXPRESSLY DISCLAIMS, ALL OTHER
WARRANTIES OF ANY KIND, EXPRESSED OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY WARRANTIES OF NON-
INFRINGEMENT, MERCHANTABILITY, SUITABILITY OR FITNESS FOR A PARTICULAR PURPOSE. WITHOUT LIMITING ANY OF
THE FOREGOING, UNDER NO CIRCUMSTANCES SHOULD THE CERTIFICATION ESTABLISHED BY THIS REPORT BE CONSTRUED
TO IMPLY ANY ENDORSEMENT OR WARRANTY REGARDING THE FUNCTIONALITY, QUALITY OR PERFORMANCE OF THE
SUBJECT HARDWARE OR SOFTWARE, AND NO PERSON OR PARTY SHALL STATE OR IMPLY ANYTHING TO THE CONTRARY. THE
LIABILITY AND OBLIGATIONS OF GLI EUROPE HEREUNDER, AND THE REMEDY OF THE RECIPIENT, UNDER OR IN CONNECTION
WITH THIS AGREEMENT SHALL BE LIMITED TO, AT GLI EUROPE’S OPTION, REPLACEMENT OF THE SERVICES PROVIDED OR
THE REFUND BY GLI EUROPE OF ANY MONIES RECEIVED BY IT FOR THE SERVICES PROVIDED. IN NO EVENT SHALL GLI
EUROPE BE RESPONSIBLE TO THE RECIPIENT OR ANY THIRD PARTY FOR ANY CONSEQUENTIAL, INCIDENTAL, DIRECT,
INDIRECT OR SPECIAL DAMAGES, INCLUDING WITHOUT LIMITATION DAMAGES FOR LOST PROFITS OR REVENUE, BUSINESS
INTERRUPTION, OR PUNITIVE DAMAGES, EVEN IF GLI EUROPE HAD BEEN ADVISED OF THE POTENTIAL FOR SUCH DAMAGES
AND WHETHER SUCH DAMAGES ARISE IN CONTRACT, NEGLIGENCE, TORT, UNDER STATUTE, IN EQUITY, AT LAW OR
OTHERWISE. ALL RIGHTS AND REMEDIES OF THIRD PARTIES RELATING TO PRODUCTS AND SERVICES THAT ARE THE SUBJECT
OF THE CERTIFICATION ESTABLISHED BY THIS REPORT SHALL BE THE EXCLUSIVE RESPONSIBILITY OF THE RECIPIENT AND
GLI EUROPE EXPRESSLY DISCLAIMS ANY LIABILITY WHATSOEVER IN CONNECTION WITH SUCH THIRD PARTY RIGHTS AND
REMEDIES. GLI EUROPE AND THE RECIPIENT ACKNOWLEDGE AND AGREE THAT THE SERVICES PROVIDED BY GLI EUROPE
HEREUNDER COULD NOT BE RENDERED BY GLI EUROPE UNDER THE TERMS PROVIDED HEREIN WITHOUT AN INCREASE IN
COST IF GLI EUROPE WAS REQUIRED TO PROVIDE ANY WARRANTIES IN ADDITION TO, OR IN LIEU OF, OR WAS REQUIRED TO
ASSUME ANY LIABILITY IN EXCESS OF, THE FOREGOING.
If you should have any questions regarding this information, please feel free to contact our office.
Sincerely,
GLI EUROPE BV

Internal Reference: MO-135-ARI-14-01

Modified 11 August 2014 SLO – LC135 Page 10 of 10