Skip to content
English
  • There are no suggestions because the search field is empty.

How do I validate the integrity of C-Pen Exam Reader 3 software?

C-Pen Exam Reader 3 features secure boot and signed software to mitigate any kind of tampering with the poducts, but if you ever want to confirm that a C-Pen Exam Reader 3 device is running genuine software, use the built-in verification screen and the official verification website.

The process is designed to be simple. The device shows device and software details and a realtime generated signature. A QR code is displayed on the screen to easily deliver the details to a web app which authenticates the details. 

Use only the official verification site shown in your organisation's guidance. If your device displays a QR code, scanning it is the easiest and safest option.

 

When to use this check:

    • Before an exam session starts
    • When a device is newly received or returned from service
    • If you want extra confidence that the device software has not been altered or tampered with, for example if an unauthorised person has had unsupervised physical access to the device.
    • Before making a software update

 

          What this check confirms:

          This check confirms that the software details shown by the device are genuine and match what the device itself created.

          In simple terms, it helps confirm that the device is running authentic C-Pen Exam Reader 3 software and that the displayed software version has not been tampered with.

          This check does not decide whether a software version is approved for your exam policy. It confirms authenticity. Your normal approved-version process still applies.

          How the validation works:

          The verification process helps confirm that the device-generated verification details are authentic and consistent with the software version displayed on the device.

          When you scan the QR code, your browser opens the official C-PEN verification page. That page checks whether the code is valid. If it is, the page can confirm the software version reported by the device is authentic.

          The website is not "reading" the software version out of the code. Instead, it checks whether the code and the version shown by the device belong together.

          How to validate the device:

          1. Press-and-hold the OTA button on the Exam Reader 3 for 3 seconds.
          2. An embedded integrity check is performed, and a QR code is shown on the screen.
          3. Scan the QR code using a phone or tablet.
          4. Check that your browser opens the official verification website.
          5. Review the result shown on the page and confirm that the software version matches the version displayed on the device.

                    If scanning is not possible, the device may also show details that can be entered manually into the verification page.

                    What to look for on the website:

                    • A successful verification result
                    • The software version returned by the website
                    • A match between the website result and the version shown on the device
                    • The correct website address in your browser
                    • Make sure the web address is exactly the official verification address provided by your organisation.
                    • Look for the padlock icon that shows the connection is secure
                    • Do not continue if the browser shows a certificate or security warning

                            How to know the website is genuine:

                            Before trusting the result, check the browser address bar carefully.

                                  The website is https://verify.cpen.com/... with a padlock icon to the left of the url.

                                  If the website address looks different from the official one, or the browser shows a warning, stop and report it.

                                  What you should do if the check passes:

                                  If the verification is successful and the software version matches what the device shows, you can record that the device passed the authenticity check.

                                  You should then apply your usual local process to decide whether that software version is approved for use in an exam.

                                  What you should do in the unlikely event that the check fails:

                                  1. Do not use the device for the exam until it has been reviewed.
                                  2. Try the check again to rule out a scanning or typing error.
                                  3. If it still fails, report the device through your normal support route.

                                        A failed verification means the website could not confirm the authenticity of the software details provided by the device.

                                        Quick summary:

                                        • The device shows a QR code and software version
                                        • You scan the QR code using a browser
                                        • The official website checks that the information is genuine
                                        • You confirm the returned version matches the device screen
                                        • You then follow your organisation's normal approval rules for that version

                                                  Frequently asked questions:

                                                  Does the website tell me which software version is approved for exams?
                                                  No. The website confirms authenticity. Approval is still decided by your organisation's or exam board's normal process.

                                                  What if I cannot scan the QR code?
                                                  Use the manual entry option if it is available. Enter the details exactly as shown on the device screen.

                                                  What if the website shows a different software version from the device?
                                                  Treat this as a failed check. The device should not be used until it has been reviewed.

                                                  Is the QR code secret?
                                                  No. The QR code is simply a convenient way to access the verification details on the official website for verification.