Flandreau Santee Sioux Tribe Commission on Gaming Requirement for Electronic Gaming Device Authentication October 3, 2018 - Gaming Laboratories International (GLI) has been informed by the Flandreau Santee Sioux Tribe Commission on Gaming of a new Policy Requirement regarding future support of the Gaming Standards Association (GSA) Game Authentication Terminal (GAT) protocol.  Flandreau Santee Sioux Tribe Commission on Gaming (Commission) indicates that the support of this protocol will provide the Commission a consistent means in authenticating gaming software components operating within Flandreau Santee Sioux Tribe  jurisdiction.  GLI is releasing this advisory at the direction of Flandreau Santee Sioux Tribe Commission on Gaming to ensure that gaming suppliers have sufficient visibility on this important company policy.

• EGMs approved for use in the Flandreau Santee Sioux Tribe jurisdiction shall employ a verification mechanism which allows remote validation of all critical program storage media (PSM).   The mechanism shall be readily accessible via a communication port and utilize GAT 3.50 protocol or later as approved by the Commission; and
  
  
• The communication port shall be located within the locked cabinet area and allow connectivity without requiring access to the locked logic compartment.   If the port is located on the backplane of the cabinet, an extension cable shall be permanently mounted to allow connection of the required cable towards the front interior of the cabinet; and
  
  
• Provide on-demand authentication of each EGM PSM .   This function shall not require the EGM power to be cycled and the execution time shall not exceed twenty (20) minutes; and
  
  
• Generate a unique signature for each PSM component utilizing Secure Hashing Algorithm-1(SHA-1) as defined by the National Institute of Standards and Technology (NSIT). Hashing methodologies will be continually reevaluated by the Flandreau Santee Sioux Tribe Commission on Gaming to ensure industry best security practices are maintained; and
  
  
• Provide support for escrowing verification results. Verification results shall be preserved and retrievable pending a subsequent verification request or a loss of power.