NIFC_Cmps_PACS_SSA_-_Specs__2024_04_011_en_0001.pdf

NIFC CAMPUS PACS SERVICE SUPPORT SPECIFICATIONS

11 April 2024

PART 1 – GENERAL INFORMATION

1.1. Scope: Service Support Agreement and Physical Access Control System (PACS) maintenance to include routine service, telephone service support, testing, providing annual AMAG software service agreement and HID software support agreement (includes software updates and firmware updates, perpetual software license such as it does not cease to function upon support period ending or the BLM has the option of using the current version of the software without additional support, paying a lower-cost fee to for support and upgrades or buying a new license for an new version of the software), and biannual site inspections for the entire existing AMAG brand Physical Access Control System (PACS) and its associated components. Preventative maintenance shall also include notification of any potential problems discovered or developing in the access control system, including cabling and cable inspections.

Located at the National Interagency Fire Center (NIFC) campus.

1.2. Administration: Overall administration of this contract shall be by the Contracting Officer (CO). The CO will appoint a Contracting Officer Representative (COR) to manage the detailed activities of the service contract.

1.3. PACS System general information:

1.3.1. The system is Federal Identity Credential Access Management (FICAM) compliant.

1.3.2. There are currently 29 access control panels, 67 HID pivClass Authentication

Modules (PAMS), and 123 card readers across campus.

1.3.3. The government has maintained a service contract on the existing AMAG brand

PACS systems.

1.3.4. The NIFC campus buildings that require service support and PACS maintenance were constructed in three distinct periods, the 1960’s, 1980’s and 2010’s. The buildings include a mix of uses including office space and warehousing. The NIFC campus includes a mix of AMAG access control hardware located in 16 occupied buildings including several perimeter and vehicle gates.

1.3.5. Ceilings in the building requiring service support and PACS maintenance include a mixture of suspended tile, gypsum wood hard decking and open steel framing. No removal of hard deck ceiling is anticipated, conduit and data cable trays are accessible through access panels.

1.3.6. Interior and exterior pathways are available to all devices requiring service.

1.3.7. Refer to attachment listing of existing systems for last inspection date. Refer to attachment for campus building map.

1.4. Attachments:

1.4.1. A-1: NIFC Campus Map

1.4.2. A-2: Forms for PIV Credential processing

1.4.3. A-3: AMAG NIFC System previous inspection records

1.5. Warranty: The Contractor shall maintain a 1-year parts and 1-year labor warranty on all repairs and/or installations. The Contractor shall file any applicable manufacturer’s warranty with manufacturer for equipment provided to NIFC.

1.6. Contractor Qualifications: AMAG factory authorized vendor.

1.7. Technician Qualifications:

1.7.1. AMAG certified installers with current certifications in Symmetry version 9.4 or higher.

1.7.2. Successfully completed AMAG’s Federal Identity Credential Access Management (FICAM) training course.

1.7.3. Successfully completed Certified System Engineer ICAM PACS (CSEIP) certification.

1.8. Contractor Personnel Security and Suitability Requirements:

Performance of this contract requires contractor personnel to have a successfully adjudicated background investigation (BI), and a federal government-issued personal identification card before being allowed unsupervised access to a DOI facility and/or information system. The Contracting Officer’s Representative (COR) will be the sponsoring official, and will initiate the process for personal identity verification, BI, and card issuance.

1.8.1. At least four weeks before start of contract performance, the Contractor will identify all contractor and subcontractor personnel who will require physical and/or logical access for performance of work under this contract. The Contractor must make their personnel available at the place and time specified by the COR to initiate screening and BIs. The following forms, or their equivalent, will be used to initiate the credentialing process:

• OPM Standard Form 86

• OF 306

• PIV Form

• Fingerprinting (done electronically) at the credentialing center

1.8.2. Contractor employees are required to give, and to authorize others to give, full, frank, and truthful answers to relevant and material questions needed to reach a suitability determination. Refusal or failure to furnish or authorize provision of information may constitute grounds for an unfavorable security and suitability decision and denial or revocation of credentials. Government personnel may contact the contractor personnel being screened or investigated in person, by telephone or in writing, and the Contractor agrees to make them available for such contact.

1.8.3. Alternatively, if an individual has already been credentialed by another agency through OPM, and that credential has not yet expired, further investigation may not be necessary.

1.8.4. During performance of the contract, the Contractor will keep the COR apprised of changes in personnel to ensure that performance is not delayed by compliance with credentialing processes. Cards that have been lost, damaged, or stolen must be reported to the COR and Issuing Office within 24 hours. Replacement will be at the contractor’s expense. If reissuance of expired credentials is needed, it will be coordinated through the COR.

1.8.5. At the end of contract performance, or when a contractor employee is no longer working under this contract, the Contractor will ensure that all identification cards are returned to the COR.

1.8.6. These requirements must be incorporated into any subcontracts that require subcontractor personnel to have regular and routine unsupervised access to a federally controlled facility for more than 180 calendar days or any unsupervised access to a federally controlled Level 3 or 4 information system.

1.8.7. Remote support personnel providing assistance with government employee supervision do not require a background investigation.

1.9. Submittal items required with responder’s proposal:

1.9.1. Contractor qualifications: Document reflecting qualifications as a current AMAG factory authorized dealer.

1.9.2. Technician qualifications:

1.9.2.1. Certificate reflecting Technicians qualifications as a current AMAG factory authorized installers access control certification in Symmetry v9.4 or higher and have successfully completed AMAG’s FICAM training course.

1.9.2.2. Certificate reflecting qualifications as a Certified System Engineer ICAM PACS (CSEIP) certified for FICAM compliant access control systems.

1.9.3. Hourly Rates for Repair Service:

1.9.3.1. Hourly rate for AMAG qualified Technician.

1.9.3.2. Hourly rate for AMAG qualified CSEIP Technician.

1.10. Access Control system characteristics

1.10.1. Software: AMAG Symmetry Professional Homeland Security Edition access control software version 9.4.51 is installed on a Windows Server 2016 operating system running as a virtual machine on VMWare vSphere 7.X with 3 clients and HID Federal Identity pivClass Certificate Manager, HID pivClass Registration Engine, HID pivClass Workstation and HID pivClass PACS service software.

Servers are government owned and maintained by the government.

1.10.2. Infrastructure Hardware: Door hardware includes mag locks, electric strikes, and electrified mortise with either additional or built in request to exit and door positioning monitoring devices. Most locking mechanisms are 24V DC though there are limited 12V DC locks. AMAG controlled access points include sliding vehicle gates, lift gates, pedestrian gates, building entrances, and interior doors.

Additionally, where available the AMAG system releases magnetic door hold open devices prior to lock sweep at the end of the duty day.

1.10.3. System points: there are 24 monitor points, 2 auxiliary groups, and 3 monitor groups.

1.11. Existing Full FICAM Hardware: See table below for the equipment count, contractor must verify all hardware components.

1.11.1. M4000 Node: AMAG M4000 series, DBB database card

1.11.2. M2150 4DC Node: AMAG HSE Multinode M2150 Series 4DBC and AMAG

EN-DBU-20K-MK2-HSE door controllers, M2150 Wiegand Interface Module (WIM4), and M4000-IPS (power supply)

1.11.3. (Qty 67) HID pivclass PAM units required to allow FICAM compliance.

1.11.4. NIFC Campus PACS Facility List

Building Name

Card Readers installed in 2023

Monitoring Points

M4000 Node

HID

RKPCL40

-P Card Reader

M2150 4DC

Node

PAM

Modules

Life Safety Power Cabinet

100 ADM 4 1 2 1

102 SHP 3 1 2

106 OWY 12 2 3 6

110 TRN 8 1 2 3

115 NWS 2 1 3

140 MGB 9 1 3 5

200 BAD 7 1 4 1

205 PAR 10 2 3 5

210 RMP 5 1 2 3

215 GBK 12 8 4 6

300 JWH 18 3 5 9 1 15 2

405 HGR 5 1 1 3, not installed

410A ITS 7 2 4

410B RSC 7 2 4

410C RWS 4 6 1 3 2

415 MNT 4 1 2

Total: 103 24 29 26 4 67 6

*Note: total of 123 card readers on NIFC campus (mix of Veridt Steatlh HID RPKPCL40-P, and HID Signo 40KHNKS-03-0004XR card readers). 3 new construction projects anticipated that will require card readers, undetermined number of card readers.

1.12. Invoicing: First onsite visit invoice for 90% of completed work. On second on site visit invoice for remaining 10% of completed work.

PART 2 - PRODUCTS

2. Products

2.1. The Contractor shall provide all software patches and updates to all existing software, and firmware and programming updates to hardware, that are needed to complete the testing and inspections in accordance with these specifications and current inspection requirements by equipment manufacturer.

2.1.1. License Information as of 16 February 2024:

License Type License Status AMAG Threat Level Manager Module Active AMAG 128 Card Reader License (Professional) Active AMAG Data Connect Module Active AMAG 3 Client Software Licenses (Professional) Active AMAG Symmetry, 9.4 (Professional) Active AMAG 64 Card Reader License (Professional) Active 69 HID PAM Licenses Active HID Federal Identity pivClass Certificate Manager License, PVC-CM-MS Active HID Federal Identity pivClass Registration Engine, PVCP-D/S Active

2.2. Installation of and provide all software patches and updates to all existing software, and firmware and programming updates to hardware will be conducted in coordination with BLM IT staff to install software on BLM servers at NIFC.

2.3. Provide telephone support to COR or their designee for all software/hardware and associated components annually.

2.4. Repairs, if needed, shall be invoiced outside the scope of this contract. Such repair work is only to be performed as authorized by the Government.

PART 3 - EXECUTION

3.1 Support: AMAG Gold Service Symmetry Site Support Agreement and HID Service Support Agreement

3.2 Submittals: Within 60-days provide certificates of licenses and all software begins term of one-year or longer within 60-days of contract award.

3.2.2 Provide on-site support two visits per year with at least four months between each visit.

3.2.3 Provide same day AMAG telephone and remote support from 8:00 AM to 4:30 PM Mountain Time Monday through Friday as needed.

3.2.4 Provide end user online or in-person training for five (5) individual government employees.

3.3 Inspection and Testing of AMAG FICAM compliant system service: Provide biannual on-site preventative maintenance service program for the existing system and all infrastructure hardware components for the term of the contract. The Contractor shall ensure all inspection and testing documents are provided to the Contracting Officer and/or Contracting Officer Representative (COR). The service program shall include accomplishment and documentation of service and maintenance as scheduled with the COR to include but not be limited to:

3.3.2 Visual and physical inspection of electrical and mechanical components, to include, but not limited to:

3.3.2.2 Ensure system components are operating correctly. Readers, door locks, monitor points, wiring, request to exit, door positions monitoring components shall be checked for correct operation and verify that software is reporting anomalies (door not closed/proper REX operation/local alarms/etc.) correctly. Discrepancies are reported to the COR via inspection report (or immediately if critical for system performance).

Identified discrepancies will be corrected by either the government or the contractor at the government’s discretion. When the contractor is called upon to correct identified discrepancies, this work will be invoiced outside of this contract as time and materials at the agreed upon hourly rate provided under this contract.

3.3.2.3 Power supplies and batteries for functionality, physical anomalies, voltage, and inspection date

3.3.2.4 Inspect AMAG system environmental conditions, to include, but not limited to ventilation equipment condition, room temperature, and dust contamination.

3.3.3 Verify, record, and make any software changes/updates to ensure proper system functionality, to include, but not limited to:

3.3.3.2 Preventative maintenance of entire system

3.3.3.3 Schedules

3.3.3.4 Connectivity of server to clients is optimized.

3.3.4 Provide and install current software and/or firmware revisions/updates with coordination and approval of the COR.

3.3.5 Provide controller programming to ensure proper system functionality.

3.4 Overall system performance to include testing of campus Emergency Lockdown and

300-JWH Jack Wilson Headquarters building duress for functionality.

3.4.2 Inspect and test:

3.4.2.2 NIFC Campus- every door

3.4.2.3 Duress functionality initialized at 300-JWH Reception Desk

3.4.2.4 Duress functionality initialized at 300-JWH Leadership Suite 104

3.4.2.5 Functionality of Lockdown Sequence for 300-JWH and NIFC campus

3.5 AMAG system PM scheduled service visit:

3.5.2 Schedule the biannual site PM visit a minimum of thirty (30) days out with the

COR.

3.6 Repairs: Needed repairs discovered during routine service, inspection, and testing deemed necessary by the Contractor shall be documented in writing and immediately brought to the attention of the COR upon discovery of failure. These repairs will be invoiced outside of the scope of this contract at the hourly rate the contractor submitted as part of this contract. Repair work shall not commence until contractor is notified by the Government to proceed with repairs. Contractor shall complete repair within 2 to 5 business days.

3.7 Supervision and Inspections: The Contractor shall appoint a lead worker who shall provide supervision for technician and any sub-contractors at all times, while any service, testing, or inspections are in progress.

3.8 Documentation Reporting Requirements:

3.8.2 Inspection Report: Will include as a minimum, building number, building name, panel number, door number, card reader number, FICAM compliance status, and the status of all PACS infrastructure hardware devices/components to include power supplies.

3.8.3 The Service & Inspection Report referenced above shall be furnished in electronic format to the COR within five (5) working days after the completion of the service visit. As a minimum, the electronic format of the reports shall be in an excel spreadsheet listing components, date serviced as applicable, and functionality results.

3.8.4 Equipment discrepancies: All equipment discrepancies shall be recorded, and written notification of any necessary corrective actions taken shall be given to the COR within five (5) working days of the completion of the system service.

Verbal notification of serious deficiencies of the Access Control system shall be provided to the COR immediately upon discovery. Final reports are to be typed, clearly legible, and signed by contractor’s technician.

3.8.5 The Contractor may submit the Service & Inspection Reports via email to the

COR.

--END --