It's a potentially important clarification that this discussion is about the Election Management System (EMS). The EMS is essentially the backend that generates

It's a potentially important clarification that this discussion is about the Election Management System (EMS). The EMS is essentially the backend that generates the configuration for ballot markers and precinct tabulators, and then totalizes the results from the precinct tabulators post-election. Because the EMS is not directly involved in the handling of ballots (its totalization function can be repeated for audit or verified independently against voting machine audit tapes, voting machine audit memory cards if used, or the original ballots), it is not necessarily considered an election-critical system. Basically, it does nothing that cannot be audited after the fact. However, there is a definite potential of adverse impacts on election integrity either if the machine configuration is tampered with prior to the election or the totalized results are tampered with and the state lacks a sufficiently rigorous auditing program (which unfortunately many do). For that reason it's considered a best practice to keep the EMS under strict control. Disconnected from the internet in a locked area under Sheriff's guard is a common approach. Of course there are almost certainly counties out there that do not take any precautions. The EMS is basically just a Windows application that runs on servers in the county clerk's office, but the servers are provided on a lease basis by Dominion. So it's no surprise that Dominion sends out this basic documentation on post-installation configuration of the servers. These passwords and documents are not related to the actual "voting machines," markers and tabulators, which run on more bespoke hardware with a much more unusual security model.