Firmware Certification & Compliance Portal

Last updated: 04/08/2026

Certifications: ISO/IEC 27001:2022 · ISO 9001:2015 · ISO 14001:2015
CVE Program: GVision Italia: CVE Numbering Authority accreditata sotto ENISA Root (5 maggio 2026) · in coordinamento con GeoVision Inc. CNA

Certification Process (Summary)

  1. EU firmware creation and compilation by GVision Italia
  2. EU hardening (non-compliant features disabled, strong password policies, advanced logging)
  3. SBOM analysis and open-source component verification
  4. Complete hardware/software supply chain traceability
  5. Integrity verification and SHA256 hashing
  6. GVision Italia digital signature and validation report
  7. Archive and publication of “audit-ready” ZIP package

Package Content

EU Firmware .zip or .tar (as-is)
Digital signature .sig · SHA256 Hash .sha256
Public key public_key.pem for offline OpenSSL verification
Certification report report_certificazione.txt and operations cert_log
SBOM file .sbom.json compliant with CycloneDX 1.6 and NTIA validated
Technical manifest manifest.json (components, hashes, CNA metadata)
Open-source software licenses IT/EN
Firmware developed and finalized in Italy by GVision Italia (Terminal Manufacturer), under license from GeoVision Inc. – Taiwan (Technology Under USA Jurisdiction, NDAA, CVE, NDA).
Compliance with NIS2 guidelines and NTIA SBOM Framework.

Signature Verification (example)

Example command for offline verification of certified firmware authenticity. Replace file names with your package files.

openssl dgst -sha256 -verify public_key.pem -signature A06-GV-GEB4900_V1.05_2025_07_01.sig A06-GV-GEB4900_V1.05_2025_07_01.zip # Expected output: Verified OK

Firmware Signing Public Key (Trust Anchor)

This is the official RSA public key used by GVision Italia to digitally sign all certified firmware packages. Use this key, not the one bundled inside ZIP packages, as the authoritative trust anchor for signature verification. If the key inside a downloaded package does not match the one published here, the package may have been tampered with.

▼ Show public_key.pem
—–BEGIN PUBLIC KEY—– MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSF1RyzDWW/lB1HQ45u1 gXOMKyAnse8QCs5gxt3ipwznYCOMJkos4tq5dfAzbppNpM8+tD5mIFP/l23agvuq yRqnsO4efmua8H9Xf7jKgo+vUPXixR1jUxB3N44zm6NKmjAZ0Nh+q2ePMxoB5U9h 4r6db7Y5ekJcfTnZZ4KvgBqTnunW5KmXHQMLxgaHNz5fPRqV3Fhswde8NCnFTQEO RBEdl6j+p31aIp+65ORIabSHjFIg+aO3QAePwckT+htGcq0oKg8FBoEyblvnJWHZ 51lfzokou+ekOKzTQ4YScIJd62FfdnNvjL0IukBdfA6gbDRVDfJu/zu5Z5Ya+ZGG DQIDAQAB —–END PUBLIC KEY—–

Algorithm: RSA 2048-bit (this key): some device families are signed with a 4096-bit key, published separately · Format: PEM (PKCS#8) · Usage: OpenSSL dgst -sha256 -verify
Verification: Compare this key with the public_key.pem included in each ZIP package: they must be identical.

Certified Devices

Software

ModelFirmwareDateSHA256Package
GV-VMS20GV-VMS20_V20.0_2026_01_0202/01/2026hh8i9j0k...l1m2nDownload
GV-ControlCenterV4GV-ControlCenterV4_V4.0_2026_01_0202/01/2026ii9j0k1l...m2n3oDownload
GV-ASManagerGV-ASManager_V6.2.0_2026_01_0202/01/2026jj0k1l2m...n3o4pDownload

Switch PoE

ModelFirmwareDateSHA256Package
GV-POEM164SFPA06-GV-POEM164SFP_V1.00_2025_07_01.tar02/01/2026aa1b2c3d...e4f5gDownload
GV-POEMO84SFPA06-GV-POEMO84SFP_V1.00_2025_07_01.tar02/01/2026bb2c3d4e...f5g6hDownload
GV-POEM082SFPA06-GV-POEM082SFP_V1.00_2025_07_01.tar02/01/2026cc3d4e5f...g6h7iDownload
GV-POEM162SFPA06-GV-POEM162SFP_V1.00_2025_07_01.tar02/01/2026dd4e5f6g...h7i8jDownload

Smart Device

ModelFirmwareDateSHA256Package
GV-IO4P Smart DeviceA06-GV-IO4P_V1.00_2025_07_01.tar02/01/2026ee5f6g7h...i8j9kDownload
GV-IO8P Smart DeviceA06-GV-IO8P_V1.00_2025_07_01.tar02/01/2026ff6g7h8i...j9k0lDownload
GV-PS-HYB Smart Power UnitA06-GV-PS-HYB_V1.00_2025_07_01.tar02/01/2026gg7h8i9j...k0l1mDownload

Cameras

ModelFirmwareDateSHA256Package
GV-TBL2706A06-GV-TBL2706_V1.00_2025_07_01.tar09/11/202572a8b5f3...01ac6Download
GV-TBL4705A06-GV-TBL4705_V1.00_2025_07_01.tar09/11/20252f91a7d0...9cd8fDownload
GV-TDR2705-2FA06-GV-TDR2705-2F_V1.00_2025_07_01.tar09/11/2025ab0c3e5f...7b12aDownload
GV-EBD2704A06-GV-EBD2704_V1.00_2025_07_01.tar09/11/2025c14d22e9...44f33Download
GV-EBD4704A06-GV-EBD4704_V1.00_2025_07_01.tar09/11/2025d9a7b3c2...e7a9cDownload
GV-FER5702A06-GV-FER5702_V1.00_2025_07_01.tar09/11/2025ee13c0af...1b0fdDownload
GV-TBL8810A06-GV-TBL8810_V2.10_2025_05_20.tar09/11/2025f1d0c2a9...0a2c3Download
GV-EBD8800A06-GV-EBD8800_V1.00_2025_07_01.tar09/11/20250a17d9c3...93e11Download
GV-TBL8804A06-GV-TBL8804_V1.00_2025_07_01.tar09/11/20251122aa33...de009Download
GV-TVD8810A06-GV-TVD8810_V1.00_2025_07_01.tar09/11/202529fe7710...51a77Download
GV-EBD8813A06-GV-EBD8813_V1.00_2025_07_01.tar09/11/202577a0cc11...8caa1Download
GV-TDR4803A06-GV-TDR4803_V1.00_2025_07_01.tar09/11/202588b1d2c3...bcd22Download
GV-TBL4810A06-GV-TBL4810_V1.00_2025_07_01.tar09/11/202590aa1122...ddee3Download
GV-TVD4810A06-GV-TVD4810_V1.00_2025_07_01.tar09/11/2025a1c2d3e4...0f0f0Download
GV-EBD4813A06-GV-EBD4813_V1.00_2025_07_01.tar09/11/2025b2d3e4f5...1a1a1Download
GV-BLFC5800A06-GV-BLFC5800_V1.00_2025_07_01.tar09/11/2025c3e4f5a6...2b2b2Download
GV-EBFC5800A06-GV-EBFC5800_V1.00_2025_07_01.tar09/11/2025d3c4a6b7...1c2c3Download
GV-SD4834-IRA06-GV-SD4834-IR_V1.00_2025_07_01.tar09/11/2025e2d1f7a3...3e4e4Download
GV-SD4825-IRA06-GV-SD4825-IR_V1.00_2025_07_01.tar09/11/2025e3f2d1a2...1f3f4Download
GV-PTZ5810-IRA06-GV-PTZ5810-IR_V1.00_2025_07_01.tar09/11/2025f4e5a3b2...c1d2dDownload
GV-TDR8805A06-GV-TDR8805_V1.00_2025_07_01.tar09/11/2025a3b2d1c2...d4e5fDownload
GV-TFD4800A06-GV-TFD4800_V1.00_2025_07_01.tar09/11/2025b1c2d3e4...f5a6bDownload
GV-PBL8800A06-GV-PBL8800_V1.00_2025_07_01.tar09/11/2025c4d5e6f7...g8h9iDownload
GV-PDR8800A06-GV-PDR8800_V1.00_2025_07_01.tar09/11/2025f1e2d3c4...b5a6cDownload
GV-TBLP5800A06-GV-TBLP5800_V1.00_2025_07_01.tar09/11/2025g2h3i4j5...k6l7mDownload
GV-TBLP8800A06-GV-TBLP8800_V1.03_2025_06_10.tar09/11/2025c3e4f5a6...2b2b2Download
GV-EBDP5800A06-GV-EBDP5800_V1.00_2025_07_01.tar09/11/2025d4e5f6g7...h8i9jDownload
GV-EBDP8800A06-GV-EBDP8800_V1.00_2025_07_01.tar09/11/2025e5f6g7h8...i9j0kDownload
GV-BX2802A06-GV-BX2802_V1.00_2025_07_01.tar09/11/2025f6g7h8i9...j0k1lDownload
GV-BX4802A06-GV-BX4802_V1.00_2025_07_01.tar09/11/2025g7h8i9j0...k1l2mDownload
GV-TMEB5800A06-GV-TMEB5800_V1.00_2025_07_01.tar09/11/2025h8i9j0k1...l2m3nDownload
GV-GEBF4911A06-GV-GEBF4911_V1.00_2025_07_01.tar09/11/2025i9j0k1l2...m3n4oDownload
GV-GEB4900A06-GV-GEB4900_V1.05_2025_07_01.tar09/11/2025j0k1l2m3...n4o5pDownload
GV-GDR4900A06-GV-GDR4900_V1.00_2025_07_01.tar09/11/2025k1l2m3n4...o5p6qDownload
GV-GBL4900A06-GV-GBL4900_V1.00_2025_07_01.tar09/11/2025l2m3n4o5...p6q7rDownload
GV-GBL4911A06-GV-GBL4911_V1.04_2025_06_15.tar09/11/2025m3n4o5p6...q7r8sDownload
GV-GVD4910A06-GV-GVD4910_V1.00_2025_07_01.tar09/11/2025n4o5p6q7...r8s9tDownload
GV-GPH2800A06-GV-GPH2800_V1.00_2025_07_01.tar09/11/2025o5p6q7r8...s9t0uDownload
GV-PFER12800A06-GV-PFER12800_V1.00_2025_07_01.tar09/11/2025p6q7r8s9...t0u1vDownload
GV-TMS8800A06-GV-TMS8800_V1.00_2025_07_01.tar09/11/2025q7r8s9t0...u1v2wDownload
GV-GFER6900A06-GV-GFER6900_V1.00_2025_07_01.tar09/11/2025r8s9t0u1...v2w3xDownload
GV-GPTZ4810A06-GV-GPTZ4810_V1.00_2025_07_01.tar09/11/2025s9t0u1v2...w3x4yDownload
GV-GBLF2802-2FA06-GV-GBLF2802-2F_V1.00_2025_07_01.tar09/11/2025t0u1v2w3...x4y5zDownload
GV-GBL12811A06-GV-GBL12811_V1.00_2025_07_01.tar09/11/2025u1v2w3x4...y5z6aDownload
GV-GBLN4800A06-GV-GBLN4800_V1.00_2025_07_01.tar09/11/2025v2w3x4y5...z6a7bDownload
GV-GEBN4800A06-GV-GEBN4800_V1.00_2025_07_01.tar09/11/2025w3x4y5z6...a7b8cDownload
GV-TMS20811A06-GV-TMS20811_V1.00_2025_07_01.tar09/11/2025x4y5z6a7...b8c9dDownload
GV-GFER12800A06-GV-GFER12800_V1.00_2025_07_01.tar09/11/2025y5z6a7b8...c9d0eDownload
GV-GBLF4802-2FA06-GV-GBLF4802-2F_V1.00_2025_07_01.tar09/11/2025z6a7b8c9...d0e1fDownload
GV-GDRF4800-2FA06-GV-GDRF4800-2F_V1.00_2025_07_01.tar09/11/2025a7b8c9d0...e1f2gDownload
GV-GEBF4802-2FA06-GV-GEBF4802-2F_V1.00_2025_07_01.tar09/11/2025b8c9d0e1...f2g3hDownload
GV-GDR2801-2FA06-GV-GDR2801-2F_V1.00_2025_07_01.tar09/11/2025c9d0e1f2...g3h4iDownload

Supply Chain – Complete Traceability Process

Each device (cameras, NVRs, switches, PoE, networking) follows a rigorous process from production to final distribution, ensuring full traceability, regulatory compliance and supply chain security according to NIS2, NDAA and CVE CNA standards.

1

Hardware Production – GeoVision Inc. Taiwan & GVision Italia

Cameras and video surveillance devices are manufactured at certified GeoVision Inc. facilities in Taiwan (CVE CNA Vendor), under USA technology jurisdiction. Network devices (switches, PoE power supplies, access points) are designed and manufactured by GVision Italia S.r.l. at the Giussano (MB) headquarters. Each unit, regardless of origin, is tracked with unique serial number and complete origin documentation to ensure NDAA (National Defense Authorization Act) compliance and NIS2 supply chain traceability.

2

International Shipping and Logistics

GeoVision Taiwan products: Devices are shipped through certified logistics channels with complete customs documentation and end-to-end tracking. Each shipment includes certificates of origin, CE compliance, and supply chain security documentation to ensure integrity during international transport.

GVision Italia products: Manufactured directly at the Giussano (MB) headquarters, requiring no international shipping. The supply chain is entirely Italian, ensuring complete traceability and fast delivery times for the domestic market.

3

Arrival in Italy – Terminal Manufacturer & Substantial Modification

For GeoVision Taiwan products: Once received at GVision Italia headquarters in Giussano (MB), devices undergo quality and security checks. GVision Italia S.r.l., as “Terminal Manufacturer” formally appointed by GeoVision Inc., performs substantial firmware modifications pursuant to Cyber Resilience Act (EU) 2024/2847, Article 22, assuming manufacturer responsibility for modified products.

For GVision Italia products (switches, PoE, networking): Designed and manufactured directly in Italy with native EU-compliant firmware.

Security hardening activities include: EU-compliant firmware development and finalization, disabling non-compliant features, strong password policies per NIS2, GDPR-compliant advanced logging, ISO 27001:2022 certified penetration testing, and supply chain control per NIS2 Directive Art. 21(2)(d).

CVE vulnerability disclosure: GVision Italia coordinates with GeoVision Inc. (CVE CNA Vendor) for hardware vulnerabilities of Taiwan products, and, as a CVE Numbering Authority accredited under the ENISA Root since 5 May 2026, assigns and publishes CVE identifiers for its own products independently.

4

Digital Signature and Portal Publication

Each firmware is digitally signed by GVision Italia using RSA asymmetric cryptography (2048 or 4096 bit depending on the device family). The complete package includes: certified firmware, NTIA validated CycloneDX 1.6 SBOM, digital signature .sig, SHA256 hash, PEM public key, certification report and open-source licenses. “Audit-ready” packages are then published on this portal for verification and download by customers and authorities.

5

Distribution and Sales – Post-Sales Warranty

Certified devices (cameras, NVRs, switches, PoE power supplies, access points) are distributed through the GVision Italia commercial network to end customers (Public Administration, companies, certified installers). Each device is accompanied by complete documentation of GDPR, NIS2 and AI Act compliance, with continuous technical support and traceable firmware updates. The serial traceability system ensures unique identification of each device throughout its operational life.

Supply chain certifications: ISO/IEC 27001:2022 · ISO 9001:2015 · ISO 14001:2015
CVE Program: GVision Italia: CVE Numbering Authority accreditata sotto ENISA Root (5 maggio 2026) · in coordinamento con GeoVision Inc. CNA
Regulatory compliance: NIS2 Directive (EU) 2022/2555 · GDPR (EU) 2016/679 · AI Act (EU) 2024/1689 · Cyber Resilience Act (EU) 2024/2847

Contact: compliance@gvision.it · PEC: gvisionitalia@pec.gvision.it

© 2026 GVision Italia S.r.l. – All rights reserved

Certificazioni EUCI / ISO 27001 / ISO 14001
GVision Italia è GeoVision Italia: immettiamo sul mercato europeo i sistemi GeoVision e ne rispondiamo, come unica azienda italiana accreditata CVE Numbering Authority sotto ENISA Root.