28 13 00 Physical Access Control Specification.pdf

Michael E. Debakey VA Medical Center VA Project: 580-18-118 Network Contracting Office 16 Renovation of Pathology and Laboratory Phase I

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 1

SECTION 28 13 00

PHYSICAL ACCESS CONTROL SYSTEM

PART 1 – GENERAL

1.1 DESCRIPTION

A. This section specifies the work regarding the expansion of PAC and addition of some card readers in the existing system.

B. This Section includes a Physical Access Control System consisting of a system server, operating system and application software, and field-installed Controllers connected by a high-speed electronic data transmission network. The PACS shall have the following:

1. Physical Access Control:

a. Regulating access through doors

b. Anti-passback

c. Visitor assignment

d. Surge and tamper protection

e. Credential cards and readers

f. RS-232 ASCII interface

g. Reporting

C. System Architecture:

1. Criticality, operational requirements, and/or limiting points of failure may dictate the development of an enterprise and regional server architecture as opposed to system capacity. Provide server and workstation configurations with all necessary connectors, interfaces and accessories as shown.

D. PACS shall provide secure and reliable identification of Federal employees and contractors by utilizing credential authentication per FIPS-201.

E. Existing Physical Access Control System (PACS) consists of:

1. Head-End equipment server,

2. PC-based workstations,

3. Physical Access Control System and Database Management Software,

4. Credential validation software/hardware,

5. Field installed controllers,

6. PIV Middelware,

7. Card readers,(New Card Reader to be Provided per drawings)

8. Power supplies,

9. Interfaces with:

a. Video Surveillance and Assessment System,

b. Intrusion Detection System,

c. Intercommunication System

28 13 00 - 2

d. Building Management System, F. Existing Head-End equipment server, workstations and controllers are connected by a high-speed electronic data transmission network.

G. Information system supporting PACS , Head-End equipment server, workstations, network switches, routers and controllers comply with FIPS 200 requirements (Minimum Security

Requirements for Federal Information and Information Systems)and NIST Special Publication

800-53 (Recommended Security Controls for Federal Information Systems).

H. PACS system supports:

1. Multiple credential authentication modes,

2. Bidirectional communication with the reader,

3. Incident response policy implementation capability; system shall have capability to automatically change access privileges for certain user groups to high security areas in case of incident/emergency.

4. Visitor management, I. All security relevant decisions are made on “secure side of the door”. Secure side processing includes:

1. Challenge/response management,

2. PKI path discovery and validation,

3. Credential identifier processing,

4. Authorization decisions.

J. For locations where secure side processing is not applicable the tamper switches and certified cryptographic processing is to be provided per FIPS-140-2.

K. Software and controllers shall be capable of matching full 56 bit FASC-N plus minimum of 32 bits of public key certificate data.

L. Software has the following capabilities:

1. Multiuser multitasking to allow for independent activities and monitoring to occur simultaneously at different workstations.

2. Support authentication and enrolment;

a. PIV verification,

b. Expiration date check,

c. Digital photo display/check,

d. Validate digital signatures of data objects (Objects are signed by the Trusted Authority,

3. System license is for the entire system and includes capability for future additions that are within the indicated system size limits specified in this Section.

4. Operator login and access shall be utilized via integrated smart card reader and password protection.

28 13 00 - 3

M. Number of points:

1. PACS supports multiple autonomous regional servers that can connect to a master command and controller server.

2. Unlimited number of access control readers, unlimited number of inputs or outputs, unlimited number of client workstations, unlimited number of cardholders.

3. Total system solution to enable enterprise-wide, networked, multi-user access to all system resources via a wide range of options for connectivity with the customer’s existing LAN and

WAN.

1.2 RELATED WORK

A. Section 01 00 00 - GENERAL REQUIREMENTS. For General Requirements.

B. Section 07 84 00 - FIRESTOPPING. Requirements for firestopping application and use.

C. Section 08 71 00 - DOOR HARDWARE. Requirements for door installation.

D. Section 26 05 11 - REQUIREMENTS FOR ELECTRICAL INSTALLATIONS. Requirements for connection of high voltage.

E. Section 26 05 19 - LOW VOLTAGE ELECTRICAL POWER CONDUCTORS AND CABLES (600

VOLTS AND BELOW). Requirements for power cables.

F. Section 26 05 33 – RACEWAYS AND BOXES FOR ELECTRICAL SYSTEMS. Requirements for infrastructure.

G. Section 28 31 00 - FIRE DETECTION AND ALARM. Requirements for integration with fire detection and alarm system.

1.3 QUALITY ASSURANCE

A. The Contractor shall be responsible for providing, installing, and the operation of the PACS as shown. The Contractor shall also provide certification as required.

B. The security system will be installed and tested to ensure all components are fully compatible as a system and can be integrated with all associated security subsystems, whether the security system is stand-alone or a part of a complete Information Technology (IT) computer network.

C. Manufacturers Qualifications: The manufacturer shall regularly and presently produce, as one of the manufacturer's principal products, the equipment and material specified for this project, and shall have manufactured the item for at least three years.

D. Product Qualifications:

1. Manufacturer's product shall have been in satisfactory operation, on three installations of similar size and type as this project, for approximately three years.

2. The Government reserves the right to require the Contractor to submit a list of installations where the products have been in operation before approval.

E. Contractor Qualifications:

1. The Contractor or security sub-contractor shall be a licensed security Contractor with a minimum of five (5) years experience installing and servicing systems of similar scope and

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 4 complexity, and also the system shall be compatible with ”Schneider Electric Andover

Continuum” for adding or modifying the existing PACS system in the facility. The Contractor shall be an authorized regional representative of the Security Management System’s (PACS) manufacturer. The Contractor shall provide four (4) current references from clients with systems of similar scope and complexity which became operational in the past three (3) years. At least three (3) of the references shall be utilizing the same system components, in a similar configuration as the proposed system. The references must include a current point of contact, company or agency name, address, telephone number, complete system description, date of completion, and approximate cost of the project. The owner reserves the option to visit the reference sites, with the site owner’s permission and representative, to verify the quality of installation and the references’ level of satisfaction with the system. The

Contractor shall provide copies of system manufacturer certification for all technicians. The

Contractor shall only utilize factory-trained technicians to install, program, and service the

PACS. The Contractor shall only utilize factory-trained technicians to install, terminate and service controller/field panels and reader modules. The technicians shall have a minimum of five (5) continuous years of technical experience in electronic security systems. The

Contractor shall have a local service facility. The facility shall be located within 60 miles of the project site. The local facility shall include sufficient spare parts inventory to support the service requirements associated with this contract. The facility shall also include appropriate diagnostic equipment to perform diagnostic procedures. The COR reserves the option of surveying the company’s facility to verify the service inventory and presence of a local service organization.

a. The Contractor shall provide proof project superintendent with BICSI Certified

Commercial Installer Level 1, Level 2, or Technician to provide oversight of the project.

b. Cable installer must have on staff a Registered Communication Distribution Designer

(RCDD) certified by Building Industry Consulting Service International. The staff member shall provide consistent oversight of the project cabling throughout design, layout, installation, termination and testing.

F. Service Qualifications: There shall be a permanent service organization maintained or trained by the manufacturer which will render satisfactory service to this installation within eight hours of receipt of notification that service is needed. Submit name and address of service organizations.

1.4 SUBMITTALS

A. Submit below items in conjunction with Master Specification Sections 01 33 23, SHOP

DRAWINGS, PRODUCT DATA, AND SAMPLES

B. Provide certificates of compliance with Section 1.3, Quality Assurance.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 5

C. Provide a complete and thorough pre-installation and as-built design package in both electronic format and on paper, minimum size 48 x 48 inches (1220 x 1220 millimeters); drawing submittals shall be per the established project schedule.

D. Shop drawing and as-built packages shall include, but not be limited to:

1. Index Sheet that shall:

a. Define each page of the design package to include facility name, building name, floor, and sheet number.

b. Provide a complete list of all security abbreviations and symbols.

c. Reference all general notes that are utilized within the design package.

d. Specification and scope of work pages for all individual security systems that are applicable to the design package that will:

1) Outline all general and job specific work required within the design package.

2) Provide a detailed device identification table outlining device Identification (ID) and use for all security systems equipment utilized in the design package.

2. Drawing sheets that will be plotted on the individual floor plans or site plans shall:

a. Include a title block as defined above.

b. Clearly define the drawings scale in both standard and metric measurements.

c. Provide device identification and location.

d. Address all signal and power conduit runs and sizes that are associated with the design of the electronic security system and other security elements (e.g., barriers, etc.).

e. Identify all pull box and conduit locations, sizes, and fill capacities.

f. Address all general and drawing specific notes for a particular drawing sheet.

3. A detailed riser drawing for each applicable security subsystem shall:

a. Indicate the sequence of operation.

b. Relationship of integrated components on one diagram.

c. Include the number, size, identification, and maximum lengths of interconnecting wires.

d. Wire/cable types shall be defined by a wire and cable schedule. The schedule shall utilize a lettering system that will correspond to the wire/cable it represents (example: A = 18

AWG/1 Pair Twisted, Unshielded). This schedule shall also provide the manufacturer’s name and part number for the wire/cable being installed.

4. A detailed system drawing for each applicable security system shall:

a. Clearly identify how all equipment within the system, from main panel to device, shall be laid out and connected.

b. Provide full detail of all system components wiring from point-to-point.

c. Identify wire types utilized for connection, interconnection with associate security subsystems.

d. Show device locations that correspond to the floor plans.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 6

e. All general and drawing specific notes shall be included with the system drawings.

5. A detailed schedule for all of the applicable security subsystems shall be included. All schedules shall provide the following information:

a. Device ID.

b. Device Location (e.g. site, building, room number, location, and description).

c. Mounting type (e.g. flush, wall, surface, etc.).

d. Power supply or circuit breaker and power panel number.

e. In addition, for the PACS, provide the door ID, door type (e.g. wood or metal), locking mechanism (e.g. strike or electromagnetic lock) and control device (e.g. card reader or biometrics).

6. Detail and elevation drawings for all devices that define how they were installed and mounted.

E. Pre-installation design packages shall go through a full review process conducted by the

Contractor along with a VA representative to ensure all work has been clearly defined and completed.

F. Provide manufacturer security system product cut-sheets. Submit for approval at least 30 days prior to commencement of formal testing, a Security System Operational Test Plan. Include procedures for operational testing of each component and security subsystem, to include performance of an integrated system test.

G. Submit manufacture’s certification of Underwriters Laboratories, Inc. (UL) listing as specified.

Provide all maintenance and operating manuals per Section 01 00 00, GENERAL

REQUIREMENTS.

H. General: Submittals shall be in full compliance of the Contract Documents. All submittals shall be provided in accordance with this section. Submittals lacking the breath or depth these requirements will be considered incomplete and rejected. Submissions are considered multidisciplinary and shall require coordination with applicable divisions to provide a complete and comprehensive submission package. Additional general provisions are as follows:

1. The Contractor shall schedule submittals in order to maintain the project schedule. For coordination drawings refer to Specification Section 01 33 10 - DESIGN SUBMITTAL

PROCEDURES, which outline basic submittal requirements and coordination. Section 01 33

10 shall be used in conjunction with this section.

2. The Contractor shall identify variations from requirements of Contract Documents and state product and system limitations, which may be detrimental to successful performance of the completed work or system.

3. Each package shall be submitted at one (1) time for each review and include components from applicable disciplines (e.g., electrical work, architectural finishes, door hardware, etc.)

which are required to produce an accurate and detailed depiction of the project.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 7

4. Manufacturer’s information used for submittal shall have pages with items for approval tagged, items on pages shall be identified, and capacities and performance parameters for review shall be clearly marked through use of an arrow or highlighting. Provide space for

COR and Contractor review stamps.

5. Technical Data Drawings shall be in the latest version of AutoCAD®, drawn accurately, and in accordance with VA CAD Standards. FREEHAND SKETCHES OR COPIED VERSIONS

OF THE CONSTRUCTION DOCUMENTS WILL NOT BE ACCEPTED. The Contractor shall not reproduce Contract Documents or copy standard information as the basis of the

Technical Data Drawings. If departures from the technical data drawings are subsequently deemed necessary by the Contractor, details of such departures and the reasons thereof shall be submitted in writing to the COR for approval before the initiation of work.

6. Packaging: The Contractor shall organize the submissions according to the following packaging requirements.

a. Binders: For each manual, provide heavy duty, commercial quality, durable three (3) ring vinyl covered loose leaf binders, sized to receive 8.5 x 11 in paper, and appropriate capacity to accommodate the contents. Provide a clear plastic sleeve on the spine to hold labels describing the contents. Provide pockets in the covers to receive folded sheets.

1) Where two (2) or more binders are necessary to accommodate data, correlate data in each binder into related groupings according to the Project Manual table of contents.

Cross-referencing other binders where necessary to provide essential information for communication of proper operation and or maintenance of the component or system.

2) Identify each binder on the front and spine with printed binder title, Project title or name, and subject matter covered. Indicate the volume number if applicable.

b. Dividers: Provide heavy paper dividers with celluloid tabs for each Section. Mark each tab to indicate contents.

c. Protective Plastic Jackets: Provide protective transparent plastic jackets designed to enclose diagnostic software for computerized electronic equipment.

d. Text Material: Where written material is required as part of the manual use the manufacturer's standard printed material, or if not available, specially prepared data, neatly typewritten on 8.5 inches by 11 inches 20 pound white bond paper.

e. Drawings: Where drawings and/or diagrams are required as part of the manual, provide reinforced punched binder tabs on the drawings and bind them with the text.

1) Where oversized drawings are necessary, fold the drawings to the same size as the text pages and use as a foldout.

2) If drawings are too large to be used practically as a foldout, place the drawing, neatly folded, in the front or rear pocket of the binder. Insert a type written page indicating

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 8 the drawing title, description of contents and drawing location at the appropriate location of the manual.

3) Drawings shall be sized to ensure details and text is of legible size. Text shall be no less than 1/16” tall.

f. Manual Content: In each manual include information specified in the individual

Specification section, and the following information for each major component of building equipment and controls:

1) General system or equipment description.

2) Design factors and assumptions.

3) Copies of applicable Shop Drawings and Product Data.

4) System or equipment identification including: manufacturer, model and serial numbers of each component, operating instructions, emergency instructions, wiring diagrams, inspection and test procedures, maintenance procedures and schedules, precautions against improper use and maintenance, repair instructions, sources of required maintenance materials and related services, and a manual index.

g. Binder Organization: Organize each manual into separate sections for each piece of related equipment. At a minimum, each manual shall contain a title page, table of contents, copies of Product Data supplemented by drawings and written text, and copies of each warranty, bond, certifications, and service Contract issued. Refer to Group I through V Technical Data Package Submittal requirements for required section content.

h. Title Page: Provide a title page as the first sheet of each manual to include the following information; project name and address, subject matter covered by the manual, name and address of the Project, date of the submittal, name, address, and telephone number of the Contractor, and cross references to related systems in other operating and/or maintenance manuals.

i. Table of Contents: After the title page, include a type written table of contents for each volume, arranged systematically according to the Project Manual format. Provide a list of each product included, identified by product name or other appropriate identifying symbols and indexed to the content of the volume. Where more than one (1) volume is required to hold data for a particular system, provide a comprehensive table of contents for all volumes in each volume of the set.

j. General Information Section: Provide a general information section immediately following the table of contents, listing each product included in the manual, identified by product name. Under each product, list the name, address, and telephone number of the installer and maintenance Contractor. In addition, list a local source for replacement parts and equipment.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 9

k. Drawings: Provide specially prepared drawings where necessary to supplement the manufacturers printed data to illustrate the relationship between components of equipment or systems, or provide control or flow diagrams. Coordinate these drawings with information contained in Project Record Drawings to assure correct illustration of the completed installation.

l. Manufacturer’s Data: Where manufacturer's standard printed data is included in the manuals, include only those sheets that are pertinent to the part or product installed.

Mark each sheet to identify each part or product included in the installation. Where more than one (1) item in tabular format is included, identify each item, using appropriate references from the Contract Documents. Identify data that is applicable to the installation and delete references to information which is not applicable.

m. Where manufacturer's standard printed data is not available and the information is necessary for proper operation and maintenance of equipment or systems, or it is necessary to provide additional information to supplement the data included in the manual, prepare written text to provide the necessary information. Organize the text in a consistent format under a separate heading for different procedures. Where necessary, provide a logical sequence of instruction for each operating or maintenance procedure.

Where similar or more than one product is listed on the submittal the Contractor shall differentiate by highlighting the specific product to be utilized.

n. Calculations: Provide a section for circuit and panel calculations.

o. Certifications: Provide section for Contractor’s manufacturer certifications.

7. Contractor Review: Review submittals prior to transmittal. Determine and verify field measurements and field construction criteria. Verify manufacturer’s catalog numbers and conformance of submittal with requirements of contract documents. Return non-conforming or incomplete submittals with requirements of the work and contract documents. Apply

Contractor’s stamp with signature certifying the review and verification of products occurred, and the field dimensions, adjacent construction, and coordination of information is in accordance with the requirements of the contract documents.

8. Resubmission: Revise and resubmit submittals as required within 15 calendar days of return of submittal. Make resubmissions under procedures specified for initial submittals. Identify all changes made since previous submittal.

9. Product Data: Within 15 calendar days after execution of the contract, the Contractor shall submit for approval a complete list of all of major products proposed for use. The data shall include name of manufacturer, trade name, model number, the associated contract document section number, paragraph number, and the referenced standards for each listed product.

I. FIPS 201 Compliance Certificates

28 13 00 - 10

1. Provide Certificates for all software components and device types utilizing credential verification. Provide certificates for:

a. Fingerprint Capture Station

b. Card Readers

c. Facial Image Capturing Camera

d. PIV Middelware

e. Template Matcher

f. Certificate Management

1) CAK Authentication System

2) PIV Authentication System

3) Certificate Validator

4) Cryptographic Module

J. Approvals will be based on complete submission of manuals together with shop drawings.

1.5 APPLICABLE PUBLICATIONS

A. The publications listed below (including amendments, addenda, revisions, supplement, and errata) form a part of this specification to the extent referenced. The publications are referenced in the text by the basic designation only.

B. American National Standards Institute (ANSI)/ Security Industry Association (SIA):

AC-03 ......................................... Access Control: Access Control Guideline Dye Sublimation

Printing Practices for PVC Access Control Cards

TVAC-01 .................................... CCTV to Access Control Standard - Message Set for System

Integration

C. American National Standards Institute (ANSI)/ International Code Council (ICC):

A117.1 ........................................ Standard on Accessible and Usable Buildings and Facilities

D. Department of Justice American Disability Act (ADA)

28 CFR Part 36 .......................... ADA Standards for Accessible Design 2010

E. Department of Veterans Affairs (VA):

PACS-R: Physical Access Control System (PACS) Requirements

VA Handbook 0730 Security and Law Enforcement

F. National Electrical Manufactures Association (NEMA):

250-08 ........................................ Enclosures for Electrical Equipment (1000 Volts Maximum)

G. National Fire Protection Association (NFPA):

70-17 .......................................... National Electrical Code

H. ADA Standards for Accessible Design 2010

1.6 DEFINITIONS

A. Access Control List: A list of (identifier, permissions) pairs associated with a resource or an asset.

As an expression of security policy, a person may perform an operation on a resource or asset if

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 11 and only if the person’s identifier is present in the access control list (explicitly or implicitly), and the permissions in the (identifier, permissions) pair include the permission to perform the requested operation.

B. Access Control: A function or a system that restricts access to authorized persons only.

C. API Application Programming Interface

D. Authentication: A process that establishes the origin of information, or determines an entity’s identity. In this publication, authentication often means the performance of a PIV authentication mechanism.

E. Authorization: A process that associates permission to access a resource or asset with a person and the person’s identifier(s).

F. CCTV: Closed-circuit television.

G. Controller: An intelligent peripheral control unit that uses a computer for controlling its operation.

Where this term is presented with an initial capital letter, this definition applies.

H. CPU: Central processing unit.

I. Credential: Data assigned to an entity and used to identify that entity.

J. FIPS Federal Information Processing Standards

K. PACS: Physical Access Control System

L. PIV: Personal Identification Verification

M. RS-485: An TIA/EIA standard for multipoint communications.

1.7 COORDINATION

A. Coordinate arrangement, mounting, and support of electronic safety and security equipment:

1. To allow maximum possible headroom unless specific mounting heights that reduce headroom are indicated.

2. To provide for ease of disconnecting the equipment with minimum interference to other installations.

3. To allow right of way for piping and conduit installed at required slope.

4. So connecting raceways, cables, wireways, cable trays, and busways will be clear of obstructions and of the working and access space of other equipment.

B. Coordinate installation of required supporting devices and set sleeves in cast-in-place concrete, masonry walls, and other structural components as they are constructed.

C. Coordinate location of access panels and doors for electronic safety and security items that are behind finished surfaces or otherwise concealed.

1.8 PERFORMANCE REQUIREMENTS

A. PACS shall provide support for multiple authentication modes and bidirectional communication with the reader. PACS shall provide implementation capability for enterprise security policy and incident response.

B. All processing of authentication information must occur on the “safe side” of a door

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 12

C. Physical Access Control System shall provide access to following Security Areas:

1. Controlled

2. Limited

3. Exclusion

D. PACS shall provide:

1. One authentication factor for access to Controlled security areas

2. Two authentication factors for access to Limited security areas

E. System Response to Alarms: Field device network shall provide a system end-to-end response time of 1second or less for every device connected to the system. Alarms shall be annunciated at the Central Station within 1 second of the alarm occurring at a Controller or device controlled by a local Controller, and within 100 ms if the alarm occurs at the Central Station. Alarm and status changes shall be displayed within 100 ms after receipt of data by the Central Station. All graphics shall be displayed, including graphics-generated map displays, on the console monitor within 5 seconds of alarm receipt at the security console

F. False Alarm Reduction: The design of Central Station and Controllers shall contain features to reduce false alarms. Equipment and software shall comply with SIA CP-01.

1.9 EQUIPMENT AND MATERIALS

A. Materials and equipment furnished shall be of current production by manufacturers regularly engaged in the manufacture of such items, for which replacement parts shall be available.

B. When more than one unit of the same class of equipment is required, such units shall be the product of a single manufacturer.

C. Equipment Assemblies and Components:

1. Components of an assembled unit need not be products of the same manufacturer.

2. Manufacturers of equipment assemblies, which include components made by others, shall assume complete responsibility for the final assembled unit.

3. Components shall be compatible with each other and with the total assembly for the intended service.

4. Constituent parts which are similar shall be the product of a single manufacturer.

D. Factory wiring shall be identified on the equipment being furnished and on all wiring diagrams.

E. When Factory Testing Is Specified:

1. The Government shall have the option of witnessing factory tests. The contractor shall notify the VA through the COR a minimum of 15 working days prior to the manufacturers making the factory tests.

2. Four copies of certified test reports containing all test data shall be furnished to the COR prior to final inspection and not more than 90 days after completion of the tests.

3. When equipment fails to meet factory test and re-inspection is required, the contractor shall be liable for all additional expenses, including expenses of the Government.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 13

1.10 WARRANTY OF CONSTRUCTION.

A. Warrant PACS work subject to the Article “Warranty of Construction” of FAR clause 52.246-21.

B. Demonstration and training shall be performed prior to system acceptance.

1.11 GENERAL REQUIREMENTS

A. General requirements applicable to this section include:

1. General Arrangement Of Contract Documents,

2. Delivery, Handling and Storage,

3. Project Conditions,

4. Electrical Power, and

5. Substitute Materials and Equipment

PART 2 – PRODUCTS

2.1 GENERAL

A. All equipment and materials for the system will be compatible to ensure correct operation as outlined in FIPS 201, March 2006 and HSPD-12.

B. The security system characteristics listed in this section will serve as a guide in selection of equipment and materials for the PACS. If updated or more suitable versions are available then the Contracting Officer will approve the acceptance of prior to an installation.

C. PACS equipment shall meet or exceed all requirements listed below.

D. Existing PACS is comprised of, but not limited to, the following components:

1. Physical Access Control System

2. Application Software

3. System Database

4. Surge and Tamper Protection

5. Standard Workstation Hardware

6. Communications Workstation

7. Controllers (Data Gathering Panel)

8. Secondary Alarm Annunciator

9. Keypads

10. Card Readers

11. Credential Cards

12. Cables

2.2 SECURITY MANAGEMENT SYSTEM (SMS)

A. PACS shall be compatible with Schneider Electric Andover Continuum.

B. PACS door monitor switches shall be flush mount and brown in color.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 14

C. Shall allow the configuration of an enrollment and badging, alarm monitoring, administrative, asset management, digital video management, intrusion detection, visitor enrollment, remote access level management, and integrated client workstations or any combination of all or some.

D. Shall be expandable to support an unlimited number of individual module or integrated client workstations. All access control field hardware, including Data Gathering Panels(DGP), shall be connected to all physical access control system workstation on the network.

E. Shall have the ability to compose, file, maintain, update, and print reports for either individuals or the system as follows.

1. Individual reports that consist of an employee’s name, office location, phone number or direct extension, and normal hours of operation. The report shall provide a detail listing of the employee’s daily events in relation to accessing points within a facility.

2. System reports shall be able to produce information on a daily/weekly/monthly basis for all events, alarms, and any other activity associated with a system user.

F. All reports shall be in a date/time format and all information shall be clearly presented. Shall be designed to allow it to work with any industry standard network protocol and topology

G. Shall provide full interface and control of the PACS to include the following subsystems within the

PACS:

1. Public Key Infrastructure

2. Card Management

3. Identity and Access Management

4. Personal Identity Verification

2.3 SURGE AND TAMPER PROTECTION

A. Surge Protection: Protect components from voltage surges originating external to equipment housing and entering through power, communication, signal, control, or sensing leads. Include surge protection for external wiring of each conductor-entry connection to components.

B. Tamper Protection: Tamper switches on enclosures, control units, pull boxes, junction boxes, cabinets, and other system components shall initiate a tamper-alarm signal when unit is opened or partially disassembled. Control-station control-unit alarm display shall identify tamper alarms and indicate locations.

2.4 CARD READERS

A. Power: Card reader shall be compatible with Schneider Electric Andover Continuum, including its standby power source.

B. Response Time: Card reader shall respond to passage requests by generating a signal that is sent to the Controller. Response time shall be 800ms or less, from the time the card reader finishes reading the credential card until a response signal is generated.

C. Enclosure: Suitable for surface or semiflush, mounting. Mounting types shall additionally be suitable for installation in the Indoors, controlled environment.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 15

D. Display: LED or other type of visual indicator display shall provide visual and audible status indications and user prompts. Indicate power on/off, whether user passage requests have been accepted or rejected, and whether the door is locked or unlocked.

E. Shall be utilized for controlling the locking hardware on a door and allows for reporting back to the main control panel with the time/date the door was accessed, the name of the person accessing the point of entry, and its location.

F. Will be fully programmable and addressable, locally and remotely, and hardwired to the system.

G. Shall be individually home run to the main panel.

H. Shall be installed in a manner that they comply with:

1. The Uniform Federal Accessibility Standards (UFAS)

2. The Americans with Disabilities Act (ADA)

3. The ADA Standards for Accessible Design

I. The reader output shall be Wiegand, RS-22, 485 or TCP/IP.

J. Shall be housed in an aluminum bezel with a wide lead-in for easy card entry.

K. Shall contain read head electronics, and a sender to encode digital door control signals.

L. LED’s shall be utilized to indicate card reader status and access status.

M. Upon a card swipe, two audible tones or beeps shall indicate access granted and three tones or beeps shall indicate access denied.

N. Shall include a Light Emitting Diode (LED) or other type of visual indicator display and provide visual or visual and audible status indications and user prompts. The display shall indicate power on/off, and whether user passage requests have been accepted or rejected.

2.5 SYSTEM SENSORS AND RELATED EQUIPMENT

A. The PACS (Physical Access Control System) and related Equipment provided by the Contractor shall match the existing and meet following performer specifications:

B. Request to Exit Detectors:

1. Passive Infrared Request to Exit Motion Detector (REX PIR) (1) The Contractor shall provide a surface mounted motion detector to signal the physical access control system request to exit input. The motion detector shall be a passive infrared sensor designed for ceiling mounting. The detector shall be immune to radio frequency interference. The detector shall not activate or set-up on critical frequencies in the range 26 to 950 Megahertz using a 50 watt transmitter located 30.5 cm (1 ft) from the unit or attached wiring. The detector shall be available on gray or black enclosures. The color of the housing shall be coordinated with the surrounding surface.

2.6 WIRES AND CABLES

A. BELDON make PVC-Jacketed, 6 conductors, No. 22 AWG9(min), stranded (7x30) copper conductors, polypropylene insulation, PVC jacket for Card Readers.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 16

B. BELDEN make PVC jacketed 4 conductors, no 16 AWG(min),standard(7X30) copper conductor polypropylene insulation, PVC jacket for door lock power.

C. BELDEN make PVC-Jacketed, 4 conductors, No. 22 AWG(min), stranded (7x30) copper conductors, PVC insulation, PVC jacket, for request to exit device(RTE).

PART 3 - EXECUTION

3.1 GENERAL

A. The Contractor shall install all system components and appurtenances in accordance with the manufacturers’ instructions, ANSI C2, and shall furnish all necessary interconnections, services, and adjustments required for a complete and operable system as specified. Control signals, communications, and data transmission lines grounding shall be installed as necessary to preclude ground loops, noise, and surges from affecting system operation. Equipment, materials, installation, workmanship, inspection, and testing shall be in accordance with manufacturers’ recommendations and as modified herein.

B. Consult the manufacturers’ installation manuals for all wiring diagrams, schematics, physical equipment sizes, etc., before beginning system installation. Refer to the Riser/Connection diagram for all schematic system installation/termination/wiring data.

C. All equipment shall be attached to walls and ceiling/floor assemblies and shall be held firmly in place (e.g., sensors shall not be supported solely by suspended ceilings). Fasteners and supports shall be adequate to support the required load.

3.2 CURRENT SITE CONDITIONS

A. The Contractor shall visit the site and verify that site conditions are in agreement with the design package. The Contractor shall report all changes to the site or conditions which will affect performance of the system to the Owner in a report as defined in paragraph Group II Technical

Data Package. The Contractor shall not take any corrective action without written permission from the Owner.

3.3 EXAMINATION

A. Examine pathway elements intended for cables. Check raceways, cable trays, and other elements for compliance with space allocations, installation tolerances, hazards to cable installation, and other conditions affecting installation.

B. Examine roughing-in for LAN and control cable conduit systems to PCs, Controllers, card readers, and other cable-connected devices to verify actual locations of conduit and back boxes before device installation.

C. Proceed with installation only after unsatisfactory conditions have been corrected.

3.4 PREPARATION

A. Comply with recommendations in SIA CP-01.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 17

B. Comply with EIA/TIA-606, "Administration Standard for the Telecommunications Infrastructure of

Commercial Buildings."

C. Obtain detailed Project planning forms from manufacturer of access-control system; develop custom forms to suit Project. Fill in all data available from Project plans and specifications and publish as Project planning documents for review and approval.

1. Record setup data for control station and workstations.

2. For each Location, record setup of Controller features and access requirements.

3. Propose start and stop times for time zones and holidays, and match up access levels for doors.

4. Set up groups, linking, and list inputs and outputs for each Controller.

5. Assign action message names and compose messages.

6. Set up alarms. Establish interlocks between alarms, intruder detection, and video surveillance features.

7. Prepare and install alarm graphic maps.

8. Develop user-defined fields.

9. Develop screen layout formats.

10. Propose setups for guard tours and key control.

11. Discuss badge layout options; design badges.

12. Complete system diagnostics and operation verification.

13. Prepare a specific plan for system testing, startup, and demonstration.

14. Develop acceptance test concept and, on approval, develop specifics of the test.

15. Develop cable and asset management system details; input data from construction documents. Include system schematics and Technical Drawings.

D. In meetings with Architect and Owner, present Project planning documents and review, adjust, and prepare final setup documents. Use final documents to set up system software.

3.5 CABLING

A. Comply with NECA 1, "Good Workmanship in Electrical Contracting."

B. Install cables and wiring according to requirements in Section 26 05 19 - Low-Voltage Electrical

Power Conductors and Cables.

C. Wiring Method: Install wiring in raceway and cable tray except within consoles, cabinets, desks, and counters. Conceal raceway and wiring except in unfinished spaces.

D. Install cables without damaging conductors, shield, or jacket.

E. Boxes and enclosures containing security system components or cabling, and which are easily accessible to employees or to the public, shall be provided with a lock. Boxes above ceiling level in occupied areas of the building shall not be considered to be accessible. Junction boxes and small device enclosures below ceiling level and easily accessible to employees or the public shall be covered with a suitable cover plate and secured with tamperproof screws.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 18

F. Install end-of-line resistors at the field device location and not at the Controller or panel location.

3.6 CABLE APPLICATION

A. Comply with EIA/TIA-569, "Commercial Building Standard for Telecommunications Pathways and

Spaces."

B. Cable application requirements are minimum requirements and shall be exceeded if recommended or required by manufacturer of system hardware.

C. Card Readers and Keypads:

1. Install number of conductor pairs recommended by manufacturer for the functions specified.

2. Unless manufacturer recommends larger conductors, install No. 22 AWG wire if maximum distance from Controller to the reader is 250 feet (75 m), and install No. 20 AWG wire if maximum distance is 500 feet (150 m).

D. Install minimum No. 16 AWG cable from Controller to electrically powered locks. Do not exceed

500 feet (150 m).

3.7 GROUNDING

A. Comply with Division 26 Section "Grounding and Bonding for Electrical Systems."

B. Comply with IEEE 1100, "Power and Grounding Sensitive Electronic Equipment."

C. Ground cable shields, drain conductors, and equipment to eliminate shock hazard and to minimize ground loops, common-mode returns, noise pickup, cross talk, and other impairments.

D. Signal Ground:

1. Terminal: Locate in each equipment room and wiring closet; isolate from power system and equipment grounding.

2. Bus: Mount on wall of main equipment room with standoff insulators.

3. Backbone Cable: Extend from signal ground bus to signal ground terminal in each equipment room and wiring closet.

3.8 INSTALLATION

A. System installation shall be in accordance with UL 294, manufacturer and related documents and references, for each type of security subsystem designed, engineered and installed.

B. Components shall be configured with appropriate “service points” to pinpoint system trouble in less than 30 minutes.

C. The Contractor shall install all system components including Government furnished equipment, and appurtenances in accordance with the manufacturer's instructions, documentation listed in

Sections 1.4 and 1.5 of this document, and shall furnish all necessary connectors, terminators, interconnections, services, and adjustments required for a operable system.

D. The PACS will be installed, and tested to ensure all components are fully compatible as a system and integrated with all associated security subsystems, whether the system is a stand alone or a network. The contractor shall provide programming and testing of all PACS & CCTV devices into existing physical security information management.

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 19

E. The Contractor shall visit the site and verify that site conditions are in agreement with the design package. The Contractor shall report all changes to the site or conditions that will affect performance of the system to the COR in the form of a report. The Contractor shall not take any corrective action without written permission from the COR.

F. The Contractor shall visit the site and verify that site conditions are in agreement/compliance with the design package. The Contractor shall report all changes to the site or conditions that will affect performance of the system to the COR in the form of a report. The Contractor shall not take any corrective action without written permission received from the COR.

G. Existing Equipment:

1. The Contractor shall connect to and utilize existing door equipment, control signal transmission lines, and devices as outlined in the design package. Door equipment and signal lines that are usable in their original configuration without modification may be reused with COR’s approval.

2. The Contractor shall perform a field survey, including testing and inspection of all existing door equipment and signal lines intended to be incorporated into the PACS, and furnish a report to the COR’s as part of the site survey report. For those items considered nonfunctioning, provide (with the report) specification sheets, or written functional requirements to support the findings and the estimated cost to correct the deficiency. As part of the report, the Contractor shall include a schedule for connection to all existing equipment.

3. The Contractor shall make written requests and obtain approval prior to disconnecting any signal lines and equipment, and creating equipment downtime. Such work shall proceed only after receiving COR’s approval of these requests. If any device fails after the Contractor has commenced work on that device, signal or control line, the Contractor shall diagnose the failure and perform any necessary corrections to the equipment.

4. The Contractor shall be held responsible for repair costs due to Contractor negligence, abuse, or improper installation of equipment.

5. The COR shall be provided a full list of all equipment that is to be removed or replaced by the

Contractor, to include description and serial/manufacturer numbers where possible. The

Contractor shall dispose of all equipment that has been removed or replaced based upon approval of the COR after reviewing the equipment removal list. In all areas where equipment is removed or replaced the Contractor shall repair those areas to match the current existing conditions.

H. Enclosure Penetrations: All enclosure penetrations shall be from the bottom of the enclosure unless the system design requires penetrations from other directions. Penetrations of interior enclosures involving transitions of conduit from interior to exterior, and all penetrations on exterior enclosures shall be sealed with rubber silicone sealant to preclude the entry of water and will comply with VA Master Specification 07 84 00, Firestopping. The conduit riser shall terminate in a

PHYSICAL ACCESS CONTROL SYSTEM

28 13 00 - 20 hot-dipped galvanized metal cable terminator. The terminator shall be filled with an approved sealant as recommended by the cable manufacturer and in such a manner that the cable is not damaged.

I. Card Readers:

1. Connect all signal inputs and outputs as shown and specified.

2. Terminate input signals as required.

3. Program and address the reader as per the design package.

4. Readers shall be surface or flushed mounted and all appropriate hardware shall be provided to ensure the unit is installed in an enclosed conduit system.

3.9 FIELD QUALITY CONTROL

A. Manufacturer's Field Service: Engage a factory-authorized service representative to inspect, test, and adjust field-assembled components and equipment installation, including connections.

Report results in writing.

3.10 PROTECTION

A. Maintain strict security during the installation of equipment and software. Rooms housing the control station, and workstations that have been powered up shall be locked and secured, with an activated burglar alarm and access-control system reporting to a Central Station complying with

UL 1610, "Central-Station Burglar-Alarm Units," during periods when a qualified operator in the employ of Contractor is not present.

3.11 DEMONSTRATION AND TRAINING

A. Provide services of manufacturer’s technical representative for four hours to instruct VA personnel in operation and maintenance of units.

B. Develop separate training modules for the following:

1. Computer system administration personnel to manage and repair the LAN and databases and to update and maintain software.

2. Operators who prepare and input credentials to man the control station and workstations and to enroll personnel.

3. Security personnel.

4. Hardware maintenance personnel.

5. Corporate management.

C. All testing and training shall be compliant with the VA General Requirements, Section 01 00 00, GENERAL REQUIREMENTS.

-----END----