R Federal Office for Information Security | °C C le Common Criteria = | CYBERSECURITY CERTIFICATION | NAMM. aoe EUCC-3087-2026-0006 (*) Administration ID BSI-CC-PP-0105-V4-2026 ommon Criteria Common Criteria Protection Profile Common Criteria Protection Profile Security Module Application for Electronic Record-keeping Systems (SMAERS) Version 3.0.2 u, Holder of the Certificate: BSI Godesberger Allee 87 53175 Bonn Lg Evaluation Facility: TÜV Informationstechnik GmbH AL " Unternehmensgruppe TÜV NORD Common Criteria Am TÜV 1 Recognition Arrangement 45307 Essen Assurance Level: EUCC Substantial with component AVA_VAN2 Required Evaluation Level: EAL 2 augmented by ALC_LCD.1, ALC_FLR.1 and ALC_CMS.3 valid until: 31 May 2036 D-ZE-19615-01-00 The Protection Profile identified in this certificate and its attached certification report has been evaluated at the above mentioned notified evaluation facility using the Common Methodology for IT Security Evaluation (CEM). The CC and CEM used for the evaluation of the above mentioned Protection Profile are published as ISO/IEC 15408 and ISO/IEC 18045 or as CC:2022 and CEM:2022. (*) This certificate applies only to the specific version and release of the Protection Profile in its evaluated configuration and in conjunction with the complete Certification Report and Notification. For details see Certification Report part A chapter 5. The evaluation has been conducted in accordance with the provisions of Commission Implementing Regulation (EU) 2024/482 of 31 January 2024 laying down rules for the application of Regulation (EU) 2019/881 of the European Parliament and of the Council as regards the adoption of the European Common Criteria-based cybersecurity certification scheme (EUCC) and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence adduced. Bonn, 1 June 2026 jin pets Fabian Hodouschek Head of Certification Bundesamt für Sicherheit in der Informationstechnik Godesberger Allee 87 - D-53175 Bonn - Postfach 20 03 63 - D-53133 Bonn Phone +49 (0)228 99 9582-0 - Fax +49 (0)228 9582-5477 - Infoline +49 (0)228 99 9582-111 This certificate is not an endorsement of the Protection Profile by the Federal Office for Information Security or any other organisation that recognises or gives effect to this certificate, and no warranty of the Protection Profile by the Federal Office for Information Security or any other organisation that recognises or gives effect to this certificate, is either expressed or implied. This certificate and its holder are both subject to obligations and monitoring activities as specified in Commission Implementing Regulation (EU) 2024/482. This certificate, its holder and its issuer are furthermore subject to compliance rules and supervision by the National Cybersecurity Certification Authority as established at Federal Office for Information Security, Division S 14, Freital, Email: vio CC-Zert-409 EUCC-V4