VED ow DA. COMBITECH | 7 Zz & . Pep tt CCRA recognition for Een components up to EAL 2 ISO/IEC 17065 and ALC_FLR only COMMON CRITERIA CERTIFICATE OpenText ArcSight Management Center 3.2.5 and SmartConnectors 8.5.1 Type of Product: Centralized software management tool Product Manufacturer: OpenText, 275 Frank Tompa Drive Waterloo ON N2L 0A1, Canada, +800-4996-5440, www.opentext.com Combitech Certification Identification: CAB2026001 Protection Profile Conformance: None Assurance Package: EAL3 augmented with ALC_FLR.3 Certification Report: Certification Report OpenText ArcMC 3.2.5 and Connectors 8.5.1, version 1.0, CAB-260408-140202-276 IT Security Evaluation Facility: Combitech EC/ITSEF Certification Body: Combitech Certification Center, National Cybersecurity Certification Authority: FMV/ICC Certificate Id: EUCC-3135-2026-000001 Validity: 5 years from the signing date is through decision 2026-04-27 certified in accordance with the provisions of the Implementing Regulation (EU) 2024/482, EUCC Anders Staaf Head of Certification Center The IT product identified in this certificate has been evaluated by an accredited IT security evaluation facility accredited under the EU Commission Implementing Regulation (EU) 2024/482 of 31 January 2024 using the Common Methodology for IT Security Evaluation, version CEM:2022, for conformance to the Common Criteria for IT Security Evaluation, version CC:2022. This certificate applies only to the specific version and release of the product in its evaluated configuration and in conjunction with the complete certificate report. The evaluation has been conducted in accordance with the provisions of the EU Commission Implementing Regulation (EU) 2024/482, EUCC, and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence adduced. This certificate is not an endorsement of the IT product by Combitech or any other organization that recognizes or gives effect to this Certificate, is either expressed or implied. The certificate is valid for a maximum of five years but can be changed over time, For information regarding the current status of the certificate, please contact Combitech Ljungadalsgatan 2B, Växjö, www.combitech.com/certificationcenter. CCE Common Criteria CYBERSECURITY CERTIFICATION AVA_VAN2, EUCC Scheme, Combitech Certification Center, EUCC-3135-2026-000001