EHRM INFRASTRUCTURE UPGRADES

KERRVILLE VA MEDICAL CENTER – KERRVILLE,

PROJECT #: 671A4-21-700

PUB. DATE: 01-10-11

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 1

SECTION 28 13 00

PHYSICAL ACCESS CONTROL SYSTEM

PART 1 – GENERAL

1.1 DESCRIPTION

A. This section specifies the finishing, installation, connection, testing and certification of a complete and fully operational Physical Access Control System, hereinafter referred to as the PACS.

B. This Section includes a PACS consisting of combination card readers with pin codes, and field-installed Controllers connected by a high-speed electronic data transmission network. The PACS shall have the following:

1. Physical Access Control:

a. Regulating access through doors, gates, secure and traffic-control bollards

b. Anti-pass back

c. All personnel assigned Homeland Security Presidential Directive 12 (HSPD12) approved federal identification cards such as a CAC or PIV

d. Surge and tamper protection on all devices

e. Secondary alarm annunciator with light and sound per VA Handbook 0730

f. Systems must adhere to all FISMA, FIPS, and NIST standards related to the annual FISMA security controls assessment.

g. Auditable system access on all peripherals

h. Perform annual updates to the Privacy Impact Assessment (PIA)

C. PACS must provide secure and reliable identification of Federal employees and contractors by utilizing credential authentication in accordance with the following:

1. FIPS: 199, 130, 140-3, 201-3

2. NIST: 800-52, 800-53, 800-66, 800-111, 800-171, HIPAA

3. Approved 13.02 Topology PACS

D. Physical Access Control System (PACS) shall consist of:

1. Field installed controllers, Controllers shall match full 200-bit FASC-N

2. Installed by a technician holding a current Certified System Engineer ICAM PACS (CSEIP)

3. VA coordinated secure Active Directory

4. FIPS compliant shielded cabling

5. Card readers with personalized pin codes

6. Door locks (striker and/or magnetic locks) and sensors,

7. Life Safety Power supplies, PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 2

8. Controllers connected by a high-speed electronic data transmission network.

E. PACS system shall support:

1. Multiple credential authentication modes,

2. Bidirectional communication with the reader,

3. Visitor management, temporary badges will be issued and personnel escorted until CAC/PIV is issued

F. Controllers shall be capable of matching full 200-bit FASC-N

1.2 RELATED WORK

A. Section 01 00 00 - GENERAL REQUIREMENTS. For General Requirements.

B. 08 11 13 HOLLOW METAL DOORS AND FRAMES.

C. Section 26 05 11 - REQUIREMENTS FOR ELECTRICAL INSTALLATIONS. Requirements for connection of high voltage.

D. Section 26 05 33 – RACEWAYS AND BOXES FOR ELECTRICAL SYSTEMS. Requirements for infrastructure.

E. Section 26 05 41 - UNDERGROUND ELECTRICAL CONSTRUCTION. Requirements for underground installation of wiring.

F. Section 28 05 00 - COMMON WORK RESULTS FOR ELECTRONIC SAFETY AND SECURITY. For general requirements that are common to more than one section in Division 28.

G. Section 28 05 13 - CONDUCTORS AND CABLES FOR ELECTRONIC SAFETY AND SECURITY.

Requirements for conductors and cables.

H. Section 28 05 26 - GROUNDING AND BONDING FOR ELECTRONIC SAFETY AND SECURITY.

Requirements for grounding of equipment.

I. Section 28 13 53 - SECURITY ACCESS DETECTION. Requirements for screening of personnel and shipments.

J Section 28 23 00 - VIDEO SURVEILLANCE. Requirements for security camera systems.

K. Section 28 31 00 - FIRE DETECTION AND ALARM. Requirements for integration with fire detection and alarm system.

1.3 QUALITY ASSURANCE

A. The Contractor shall be responsible for providing, installing, and the operation of the PACS as shown.

B. The Contractor shall also provide certification, Certified System Engineer ICAM PACS (CSEIP).

C. The security system will be installed and tested to ensure all components are fully compatible as a system and can be integrated with all associated Identiv Hirsch subsystems, part of a complete

Information Technology (IT) computer network.

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 3

D. Manufacturers Qualifications: The manufacturer shall regularly and presently produce, as one of the manufacturer's principal products, the equipment and material specified for this project, and shall have manufactured the item for at least three years.

E. Product Qualifications:

1. Manufacturer's product shall have been in satisfactory operation, on three installations of similar size and type as this project, for approximately three years.

2. The Government reserves the right to require the Contractor to submit a list of installations where the products have been in operation before approval.

3. Integrator contractor shall be certified with Certified System Engineer ICAM PACS (CSEIP) before installation processes begin.

F. Contractor Qualifications:

1. The Contractor or security sub-contractor shall be a licensed security Contractor with a minimum of five (5) years’ experience installing and servicing systems of similar scope and complexity. The Contractor shall be an authorized regional representative of the Security

Management System’s (PACS) manufacturer. The Contractor shall provide four (4) current references from clients with systems of similar scope and complexity which became operational in the past three (3) years. At least three (3) of the references shall be utilizing the same system components, in a similar configuration as the proposed system. The references must include a current point of contact, company or agency name, address, telephone number, complete system description, date of completion, and approximate cost of the project. The owner reserves the option to visit the reference sites, with the site owner’s permission and representative, to verify the quality of installation and the references’ level of satisfaction with the system. The Contractor shall provide copies of system manufacturer CDEIP certification for all technicians. The Contractor shall only utilize factory-trained technicians to install, program, and service the PACS. The

Contractor shall only utilize factory-trained technicians to install, terminate and service controller/field panels and reader modules. The technicians shall have a minimum of five

(5) continuous years of technical experience in electronic security systems. The

Contractor shall have a local service facility. The facility shall be located within 60 miles of the project site. The local facility shall include sufficient spare parts inventory to support the service requirements associated with this contract. The facility shall also include appropriate diagnostic equipment to perform diagnostic procedures. The Resident

Engineer reserves the option of surveying the company’s facility to verify the service

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 4

inventory and presence of a local service organization.

a. The Contractor shall provide proof project superintendent with BICSI Certified

Commercial Installer Level 1, Level 2, or Technician to provide oversight of the project.

b. Cable installer must have on staff a Registered Communication Distribution Designer

(RCDD) certified by Building Industry Consulting Service International. The staff member shall provide consistent oversight of the project cabling throughout design, layout, installation, termination and testing.

G. Service Qualifications: There shall be a permanent service organization maintained or trained by the manufacturer which will render satisfactory service to this installation within four hours of receipt of notification that service is needed. Submit name and address of service organizations.

1.4 SUBMITTALS

A. Adhere to Section 28 05 00 COMMON WORK RESULTS FOR ELECTRONIC SAFETY AND SECURITY.

B. Provide certificates of compliance with Section 1.3, Quality Assurance.

C. Provide a complete and thorough pre-installation and as-built design package in both electronic format and on paper, minimum size 48 x 48 inches (1220 x 1220 millimeters); drawing submittals shall be per the established project schedule.

D. Shop drawing and as-built packages shall include, but not be limited to:

1. Index Sheet that shall:

a. Define each page of the design package to include facility name, building name, floor, and sheet number.

b. Provide a complete list of all security abbreviations and symbols.

c. Reference all general notes that are utilized within the design package.

d. Specification and scope of work pages for all individual security systems that are applicable to the design package that will:

1) Outline all general and job specific work required within the design package.

2) Provide a detailed device identification table outlining device Identification (ID) and use for all security systems equipment utilized in the design package.

2. Drawing sheets that will be plotted on the individual floor plans or site plans shall:

a. Include a title block as defined above.

b. Clearly define the drawings scale in both standard and metric measurements.

c. Provide device identification and location.

d. Address all signal and power conduit runs and sizes that are associated with the design of the electronic security system and other security elements (e.g., barriers, etc.).

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 5

e. Identify all pull box and conduit locations, sizes, and fill capacities.

f. Address all general and drawing specific notes for a particular drawing sheet.

3. Detail and elevation drawings for all devices that define how they were installed and mounted.

E. Pre-installation design packages shall go through a full review process conducted by the

Contractor along with a VA representative to ensure all work has been clearly defined and completed. All reviews shall be conducted in accordance with the project schedule. There shall be four (4) stages to the review process:

1. 35 percent

2. 65 percent

3. 95 percent

4. 100 percent

F. Provide manufacturer security system product cut-sheets. Submit for approval at least 30 days prior to commencement of formal testing, a Security System Operational Test Plan. Include procedures for operational testing of each component and security subsystem, to include performance of an integrated system test.

G. Submit manufacture’s certification of Underwriters Laboratories, Inc. (UL) listing as specified.

Provide all maintenance and operating manuals per Section 01 00 00, GENERAL REQUIREMENTS, and Section 28 05 00 COMMON WORK RESULTS FOR ELECTRONIC SAFETY AND SECURITY.

H. General: Submittals shall be in full compliance of the Contract Documents. All submittals shall be provided in accordance with this section. Submittals lacking breath or depth these requirements will be considered incomplete and rejected. Submissions are considered multidisciplinary and shall require coordination with applicable divisions to provide a complete and comprehensive submission package. Additional general provisions are as follows:

2. The Contractor shall identify variations from requirements of Contract Documents and state product and system limitations, which may be detrimental to successful performance of the completed work or system.

3. Each package shall be submitted at one (1) time for each review and include components from applicable disciplines (e.g., electrical work, architectural finishes, door hardware, etc.)

which are required to produce an accurate and detailed depiction of the project.

4. Manufacturer’s information used for submittal shall have pages with items for approval tagged, items on pages shall be identified, and capacities and performance parameters for review shall be clearly marked through use of an arrow or highlighting. Provide space for

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 6

Resident Engineer and Contractor review stamps.

5. Technical Data Drawings shall be in the latest version of AutoCAD® or REVIT to be determined by the Resident Engineer, drawn accurately, and in accordance with VA

CAD/REVIT Standards. FREEHAND SKETCHES OR COPIED VERSIONS OF THE CONSTRUCTION

DOCUMENTS WILL NOT BE ACCEPTED. The Contractor shall not reproduce Contract documents or copy standard information as the basis of the Technical Data Drawings. If departures from the technical data drawings are subsequently deemed necessary by the

Contractor, details of such departures and the reasons thereof shall be submitted in writing to the Resident Engineer for approval before the initiation of work.

6. Packaging: The Contractor shall organize the submissions according to the following packaging requirements.

a. Binders: For each manual, provide heavy duty, commercial quality, durable three (3) ring vinyl covered loose leaf binders, sized to receive 8.5 x 11 in paper, and appropriate capacity to accommodate the contents. Provide a clear plastic sleeve on the spine to hold labels describing the contents. Provide pockets in the covers to receive folded sheets.

1) Where two (2) or more binders are necessary to accommodate data, correlate data in each binder into related groupings according to the Project Manual table of contents. Cross-referencing other binders where necessary to provide essential information for communication of proper operation and or maintenance of the component or system.

2) Identify each binder on the front and spine with printed binder title, Project title or name, and subject matter covered. Indicate the volume number if applicable.

b. Dividers: Provide heavy paper dividers with celluloid tabs for each Section. Mark each tab to indicate contents.

c. Protective Plastic Jackets: Provide protective transparent plastic jackets designed to enclose diagnostic software for computerized electronic equipment.

d. Text Material: Where written material is required as part of the manual use the manufacturer's standard printed material, or if not available, specially prepared data, neatly typewritten on 8.5 inches by 11 inches 20-pound white bond paper.

e. Drawings: Where drawings and/or diagrams are required as part of the manual, provide reinforced punched binder tabs on the drawings and bind them with the text.

1) Where oversized drawings are necessary, fold the drawings to the same size as the

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 7

text pages and use as a foldout.

2) If drawings are too large to be used practically as a foldout, place the drawing, neatly folded, in the front or rear pocket of the binder. Insert a typed written page indicating the drawing title, description of contents and drawing location at the appropriate location of the manual.

3) Drawings shall be sized to ensure details and text is of legible size. Text shall be no less than 1/16” tall.

f. Manual Content: In each manual include information specified in the individual

Specification section, and the following information for each major component of building equipment and controls:

1) General system or equipment description.

2) Design factors and assumptions.

3) Copies of applicable Shop Drawings and Product Data.

4) System or equipment identification including: manufacturer, MAC address, model and serial numbers of each component, operating instructions, emergency instructions, wiring diagrams, inspection and test procedures, maintenance procedures and schedules, precautions against improper use and maintenance, repair instructions, sources of required maintenance materials and related services, and a manual index.

g. Binder Organization: Organize each manual into separate sections for each piece of related equipment. At a minimum, each manual shall contain a title page, table of contents, copies of Product Data supplemented by drawings and written text, and copies of each warranty, bond, certifications, and service Contract issued. Refer to

Group I through V Technical Data Package Submittal requirements for required section content.

h. Title Page: Provide a title page as the first sheet of each manual to include the following information; project name and address, subject matter covered by the manual, name and address of the Project, date of the submittal, name, address, and telephone number of the Contractor, and cross references to related systems in other operating and/or maintenance manuals.

i. Table of Contents: After the title page, include a type of written table of contents for each volume, arranged systematically according to the Project Manual format. Provide a list of each product included, identified by product name or other appropriate

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 8

identifying symbols and indexed to the content of the volume. Where more than one

(1) volume is required to hold data for a particular system, provide a comprehensive table of contents for all volumes in each volume of the set.

j. General Information Section: Provide a general information section immediately following the table of contents, listing each product included in the manual, identified by product name. Under each product, list the name, address, and telephone number of the installer and maintenance Contractor. In addition, list a local source for replacement parts and equipment.

k. Drawings: Provide specially prepared drawings where necessary to supplement the manufacturers printed data to illustrate the relationship between components of equipment or systems, or provide control or flow diagrams. Coordinate these drawings with information contained in Project Record Drawings to assure correct illustration of the completed installation.

l. Manufacturer’s Data: Where manufacturer's standard printed data is included in the manuals, include only those sheets that are pertinent to the part or product installed.

Mark each sheet to identify each part or product included in the installation. Where more than one (1) item in tabular format is included, identify each item, using appropriate references from the Contract Documents. Identify data that is applicable to the installation and delete references to information which is not applicable.

m. Where manufacturer's standard printed data is not available and the information is necessary for proper operation and maintenance of equipment or systems, or it is necessary to provide additional information to supplement the data included in the manual, prepare written text to provide the necessary information. Organize the text in a consistent format under a separate heading for different procedures. Where necessary, provide a logical sequence of instruction for each operating or maintenance procedure. Where similar or more than one product is listed on the submittal the

Contractor shall differentiate by highlighting the specific product to be utilized.

n. Calculations: Provide a section for circuit and panel calculations.

o. Loading Sheets: Provide a section for DGP Loading Sheets.

p. Certifications: Provide section for Contractor’s manufacturer certifications.

7. Contractor Review: Review submittals prior to transmittal. Determine and verify field measurements and field construction criteria. Verify manufacturer’s catalog numbers and conformance of submittal with requirements of contract documents. Return non-

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 9

conforming or incomplete submittals with requirements of the work and contract documents. Apply Contractor’s stamp with signature certifying the review and verification of products occurred, and the field dimensions, adjacent construction, and coordination of information is in accordance with the requirements of the contract documents.

8. Resubmission: Revise and resubmit submittals as required within 15 calendar days of return of submittal. Make resubmissions under procedures specified for initial submittals. Identify all changes made since previous submittal.

9. Product Data: Within 15 calendar days after execution of the contract, the Contractor shall submit for approval a complete list of all major products proposed for use. The data shall include name of manufacturer, trade name, model number, the associated contract document section number, paragraph number, and the referenced standards for each listed product.

I. Group 1 Technical Data Package: Group I Technical Data Package shall be one submittal consisting of the following content and organization. Refer to VA Special Conditions Document for drawing format and content requirements. The data package shall include the following:

1. Section I - Drawings:

a. General – Drawings shall conform to VA Special Conditions and CAD Standards

Documents. All text associated with security details shall be 1/8” tall and meet VA text standard for AutoCAD™ drawings.

b. Cover Sheet – Cover sheet shall consist of Project Title and Address, Project Number, Area and Vicinity Maps.

c. General Information Sheets – General Information Sheets shall consist of General Notes, Abbreviations, Symbols, Wire and Cable Schedule, Project Phasing, and Sheet Index.

d. Floor Plans – Floor plans shall be produced from the Architectural backgrounds issued in the Construction Documents. The contractor shall receive floor plans from the prime

A/E to develop these drawing sets. Security devices shall be placed on drawings in scale.

All text associated with security details shall be 1/8” tall and meet VA text standard for

AutoCAD™ drawings. Floor plans shall identify the following:

1) Security devices by symbol,

2) The associated device point number (derived from the loading sheets),

3) Wire & cable types and counts

4) Conduit sizing and routing

5) Conduit riser systems

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 10

6) Device and area detail call outs

e. Architectural details – Architectural details shall be produced for each device mounting type (door details for doors with physical access control, reader pedestals and mounts, security panel and Life Safety Power (LSP) supply details).

f. Riser Diagrams – Contractor shall provide a riser diagram indicating riser architecture and distribution of the physical access control system throughout the facility (or area in scope).

g. Block Diagrams – Contractor shall provide a block diagram for the entire system architecture and interconnections with SMS subsystems. Block diagrams shall identify

SMS subsystem (e.g., physical access control, closed circuit television, intercom, and other associated subsystems) integration; and data transmission and media conversion methodologies.

h. Interconnection Diagrams – Contractor shall provide interconnection diagram for each sensor, and device component. Interconnection diagram shall identify termination locations, standard wire detail to include termination schedule. Diagrams shall also identify interfaces to other systems such as elevator control, fire alarm system relay connections, and security management systems.

i. Security Details:

1) Panel Assembly Detail – For each panel assembly, a panel assembly details shall be provided identifying individual panel component size and content.

2) Panel Details – Provide security panel details identify general arrangement of the security system components, backboard size, wire through size and location, connection junction box locations, and power circuit requirements.

3) Device Mounting Details – Provide mounting detailed drawing for each security device (physical access control system, video surveillance and assessment, and intercom systems) for each type of wall and ceiling configuration in project. Device details shall include device, mounting detail, wiring and conduit routing.

4) Details of connections to power supplies and grounding

5) Details of surge protection device installation

6) Sensor detection patterns – Each system sensor shall have associated detection patterns.

j. Electrical Panel Schedule – Electrical Panel Details shall be provided for all SMS systems electrical power circuits. Panel details shall be provided identifying panel type

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 11

(Standard, Emergency Power, Emergency/Uninterrupted Power Source, and

Uninterrupted Power Source Only), panel location, circuit number, and circuit amperage rating.

k. Door Schedule – A door schedule shall be developed for each door equipped with electronic security components. At a minimum, the door schedule shall be coordinated with Division 08 work, VA Police Services’ Physical Security team, and include the following information:

1) Item Number

2) Door Number (Derived from A/E Drawings)

3) Floor Plan Sheet Number

4) Standard Detail Number

5) Door Description (Derived from Loading Sheets)

6) Data Gathering Panel Input Number

7) Door Position or Monitoring Device Type & Model Number

8) Lock Type, Model Number & Power Input/Draw (standby/active)

9) Card Reader Type & Model Number

10) Shunting Device Type & Model Number

11) Sounder Type & Model Number

12) Manufacturer

13) Misc. devices as required

a) Delayed Egress Type & Model Number

b) Intercom

c) Camera

d) Electric Transfer Hinge

e) Electric Pass-through device

14) Column Remarks indicating special notes or door configurations

2 Section VI – Certifications & References: All specified manufacturer’s certifications shall be included with the data package. Contractor shall provide Project references as outlined in

Paragraph 1.4 “Quality Assurance”.

A. Group II Technical Data Package

1. The Contractor shall prepare a report of “Current Site Conditions” and submit a report to the Resident Engineer documenting changes to the site, particularly those conditions that affect performance of the system to be installed. The Contractor shall provide specification

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 12

sheets, or written functional requirements to support the findings, and a cost estimate to correct those site changes or conditions which affect the installation of the system or its performance. The Contractor shall not correct any deficiency without written permission from the COR and CO.

2. System Configuration and Functionality: The contractor shall provide the results with the VA to develop system requirements and functionality including but not limited to:

a. Baseline configuration

b. Access levels

c. Schedules (physical access control, holidays, etc.)

d. Active directory affiliation with current employed system directory

e. System monitoring and reporting (unit level and central control) in with the VA Police

f. Naming conventions and descriptors

B. Group III Technical Data Package

1. Development of Test Procedures: The Contractor will prepare performance test procedures for the system testing. The test procedures shall follow the format of the VA Testing procedures and be customized to the contract requirements. The Contractor will deliver the test procedures to the Resident Engineer for approval at least 60 calendar days prior.

C. Group IV Technical Data Package

1. Performance Verification Test

a. Based on the successful completion of the pre-delivery test, the Contractor shall finalize the test procedures and report forms for the performance verification test (PVT) and the endurance test. The PVT shall follow the format, layout and content of the pre-delivery test. The Contractor shall deliver the PVT and endurance test procedures to the

Resident Engineer for approval. The Contractor may schedule the PVT after receiving written approval of the test procedures. The Contractor shall deliver the final PVT and endurance test reports within 14 calendar days from completion of the tests. Refer to

Part 3 of this section for System Testing and Acceptance requirements.

D. Group V Technical Data Package: Final copies of the manuals shall be delivered to the

Resident Engineer as part of the acceptance test. The draft copy used during site testing shall be updated with any changes required prior to final delivery of the manuals. Each manual’s contents shall be identified on the cover. The manual shall include names, addresses, and telephone numbers of each sub-contractor installing equipment or systems, as well as the nearest service representatives for each item of equipment for each system. The manuals shall

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 13

include a table of contents and tab sheets. Tab sheets shall be placed at the beginning of each chapter or section and at the beginning of each appendix. The final copies delivered after completion of the endurance test shall include all modifications made during installation, checkout, and acceptance. Six (6) hard-copies and one (1) soft copy on CD of each item listed below shall be delivered as a part of final systems acceptance.

1. Functional Design Manual: The functional design manual shall identify the operational requirements for the entire system and explain the theory of operation, design philosophy, and specific functions. A description of hardware and software functions, interfaces, and requirements shall be included for all system operating modes. Manufacturer developed literature may be used; however, shall be produced to match the project requirements.

2. Equipment Manual: A manual describing all equipment furnished including:

a. General description and specifications; installation and checkout procedures; equipment electrical schematics and layout drawings; system schematics and layout drawings;

alignment and calibration procedures; manufacturer’s repair list indicating sources of supply; and interface definition.

E. FIPS Compliance Certificates

1. Provide Certificates for all device types utilizing credential verification. Certificates for:

a. Card Readers – FICAM compliance and all NIST FIP certifications listed in section one

b. Certificate Management

1) PIV Authentication System full FICAM VA integration per references listed in section one

2) Certificate Validator database integration

F. Approvals will be based on complete submission of manuals together with shop drawings.

1.5 APPLICABLE PUBLICATIONS

A. The publications listed below (including amendments, addenda, revisions, supplement, and errata) form a part of this specification to the extent referenced. The publications are referenced in the text by the basic designation only.

B. American National Standards Institute (ANSI)/ Security Industry Association (SIA):

AC-03 .......................................... Access Control: Access Control Guideline Dye Sublimation

Printing Practices for PVC Access Control Cards

TVAC-01 ...................................... CCTV to Access Control Standard - Message Set for System

Integration

C. American National Standards Institute (ANSI)/ International Code Council (ICC):

A117.1 ........................................ Standard on Accessible and Usable Buildings and Facilities

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 14

D. Department of Justice American Disability Act (ADA)

28 CFR Part 36 ............................ ADA Standards for Accessible Design 2010

E. Department of Veterans Affairs (VA):

PACS-R: Physical Access Control System (PACS) Requirements

VA Handbook 0730 Security and Law Enforcement

F. Government Accountability Office (GAO):

GAO-03-8-02 Security Responsibilities for Federally Owned and Leased Facilities

G. National Electrical Contractors Association

303-2005 .................................... Installing Closed Circuit Television (CCTV) Systems

H. National Electrical Manufactures Association (NEMA):

250-08 ........................................ Enclosures for Electrical Equipment (1000 Volts Maximum)

I. National Fire Protection Association (NFPA):

70-11 ........................................... National Electrical Code

J. Underwriters Laboratories, Inc. (UL):

294-99 ........................................ The Standard of Safety for Access Control System Units

305-08 ........................................ Standard for Panic Hardware

752-05 ........................................ Standard for Bullet-Resisting Equipment

827-08 ........................................ Central Server Alarm Services

1076-95 ...................................... Standards for Proprietary Burglar Alarm Units and Systems

1981-03 ...................................... Central Server Automation System

2058-05 ...................................... High Security Electronic Locks

K. Homeland Security Presidential Directive (HSPD):

HSPD-12 ...................................... Policy for a Common Identification Standard for Federal

Employees and Contractors

L. Federal Communications Commission (FCC):

(47 CFR 15) Part 15 Limitations on the Use of Wireless Equipment/Systems

M. Federal Information Processing Standards (FIPS):

FIPS-130 ....................................... Intelligent Peripheral Interface (IPI)

FIPS-140-3 .................................... Security Requirements for Cryptographic Modules

FIPS-199 ....................................... Standard for Security Categorization of Federal Information and Information Systems

FIPS-201-3 ................................... Personal Identity Verification (PIV) of Federal Employees and Contractors

N. National Institute of Standards and Technology (NIST):

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 15

IR 6887 V2.1 ............................... Government Smart Card Interoperability Specification (GSC-IS)

Special Pub 800-63 ..................... Electronic Authentication Guideline

Special Pub 800-96 ..................... PIV Card Reader Interoperability Guidelines

Special Pub 800-73-3 .................. Interfaces for Personal Identity Verification (4 Parts)

. .................................................. Pt. 1- End Point PIV Card Application Namespace, Data Model &

Representation

. .................................................. Pt. 2- PIV Card Application Card Command Interface

. .................................................. Pt. 3- PIV Client Application Programming Interface

. .................................................. Pt. 4- The PIV Transitional Interfaces & Data Model Specification

Special Pub 800-76-1 .................. Biometric Data Specification for Personal Identity Verification

Special Pub 800-78-2 .................. Cryptographic Algorithms and Key Sizes for Personal Identity

Verification

Special Pub 800-79-1 .................. Guidelines for the Accreditation of Personal Identity Verification

Card Issuers

Special Pub 800-85B-1 ................ DRAFTPIV Data Model Test Guidelines

Special Pub 800-85A-2................ PIV Card Application and Middleware Interface Test Guidelines

(SP 800-73-3 compliance)

Special Pub 800-96 ..................... PIV Card Reader Interoperability Guidelines

Special Pub 800-37 ..................... Guide for Applying the Risk Management Framework to Federal

Information Systems

Special Pub 800-96 ..................... PIV Card Reader Interoperability Guidelines

Special Pub 800-96 ..................... PIV Card Reader Interoperability Guidelines

Special Pub 800-104A ................. Scheme for PIV Visual Card Topography

Special Pub 800-116 ................... Recommendation for the Use of PIV Credentials in Physical

Access Control Systems (PACS)

O. Institute of Electrical and Electronics Engineers (IEEE):

C62.41 ........................................ IEEE Recommended Practice on Surge Voltages in Low-Voltage

AC Power Circuits

P. International Organization for Standardization (ISO):

7810 ............................................ Identification cards – Physical characteristics

7811 ............................................ Physical Characteristics for Magnetic Stripe Cards

7816-1 ........................................ Identification cards - Integrated circuit(s) cards with contacts -

Part 1: Physical characteristics

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 16

7816-2 ........................................ Identification cards - Integrated circuit cards - Part 2: Cards with contacts -Dimensions and location of the contacts

7816-3 ........................................ Identification cards - Integrated circuit cards - Part 3: Cards with contacts - Electrical interface and transmission protocols

7816-4 ........................................ Identification cards - Integrated circuit cards - Part 11: Personal verification through biometric methods

7816-10 ......................................Identification cards - Integrated circuit cards - Part 4:

Organization, security and commands for interchange

14443 ......................................... Identification cards - Contactless integrated circuit cards;

Contactless Proximity Cards Operating at 13.56 MHz in up to 5 inches distance

15693 .........................................Identification cards -- Contactless integrated circuit cards -

Vicinity cards; Contactless Vicinity Cards Operating at 13.56

MHz in up to 50 inches distance

19794 ......................................... Information technology - Biometric data interchange formats

Q. Uniform Federal Accessibility Standards (UFAS) 1984

R. ADA Standards for Accessible Design 2010

S. Section 508 of the Rehabilitation Act of 1973

1.6 DEFINITIONS

A. ABA Track: Magnetic stripe that is encoded on track 2, at 75-bpi density in binary-coded decimal format; for example, 5-bit, 16-character set.

B. Access Control List: A list of (identifier, permissions) pairs associated with a resource or an asset.

As an expression of security policy, a person may perform an operation on a resource or asset if and only if the person’s identifier is present in the access control list (explicitly or implicitly), and the permissions in the (identifier, permissions) pair include the permission to perform the requested operation.

C. Access Control: A function or a system that restricts access to authorized persons only.

D. API Application Programming Interface

E. Assurance Level (or E-Authentication Assurance Level): A measure of trust or confidence in an authentication mechanism defined in OMB Memorandum M-04-04 and NIST Special Publication

(SP) 800-63, in terms of four levels: [M-04-04]

1. Level 1: LITTLE OR NO confidence

2. Level 2: SOME confidence

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 17

3. Level 3: HIGH confidence

4. Level 4: VERY HIGH confidence

F. Authentication: A process that establishes the origin of information, or determines an entity’s identity. In this publication, authentication often means the performance of a PIV authentication mechanism.

G. Authenticator: A memory, possession, or quality of a person that can serve as proof of identity, when presented to a verifier of the appropriate kind. For example, passwords, cryptographic keys, and fingerprints are authenticators.

H. Authorization: A process that associates permission to access a resource or asset with a person and the person’s identifier(s).

I. BIO or BIO-A: A FIPS 201-3 authentication mechanism that is implemented by using a

Fingerprint data object sent from the PIV Card to the PACS. Note that the short-hand “BIO (-

A)” is used throughout the document to represent both BIO and BIO-A authentication mechanisms.

J. Biometric: An authenticator produced from measurable qualities of a living person.

K. CAC EP – CAC End Point with end point PIV applet

L. CAC NG – CAC Next Generation with transitional PIV applet

M. Card Authentication Key (CAK): A PIV authentication mechanism (or the PIV Card key of the same name) that is implemented by an asymmetric or symmetric key challenge/response protocol. The CAK is an mechanism defined in NIST SP 800-73. [SP800-73] NIST identity credentials must be stored on every PIV Card or smart card and that additional common identity credentials, known as derived PIV credentials.

N. CCTV: Closed-circuit television. Must not be cloud-based and continue to function when an active license nor active internet connection are not present.

O. Central Server: A PC with software designated as the main controlling PC of the PACS. Where this term is presented with initial capital letters, this definition applies.

P. Controller: An intelligent peripheral control unit that uses a computer for controlling its operation. Where this term is presented with an initial capital letter, this definition applies.

Q. CPU: Central processing unit.

R. Credential: Data assigned to an entity and used to identify that entity.

S. File Server: A PC in a network that stores the programs and data files shared by users.

T. FIPS: Federal Information Processing Standards

U. FRAC: First Responder Authentication Credential

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 18

V. HSPD: Homeland Security Presidential Directive

W. I/O: Input/Output.

X. Identifier: A HSPD 12 approved smart card, keypad personal identification number or code, biometric characteristic, or other unique identification entered as data into the entry-control database for the purpose of identifying an individual. Where this term is presented with an initial capital letter, this definition applies.

Y. IEC: International Electrotechnical Commission

Z. ISO: International Organization for Standardization

AA. KB: Kilobyte

BB. kbit/s Kilobits / second

CC. LAN: Local area network.

DD. LED: Light-emitting diode.

EE. CAC: Common Access Card

FF. Location: A Location on the network having a PC-to-Controller communications link, with additional Controllers at the Location connected to the PC-to-Controller link with shielded RS-

485 communications loop. Where this term is presented with an initial capital letter, this definition applies.

GG. NIST: National Institute of Standards and Technology

HH. PACS: Physical Access Control System

II. PC/SC: Personal Computer / Smart Card

JJ. PC: Personal computer. This acronym applies to the Central Server, workstations, and file servers.

KK. PCI Bus: Peripheral component interconnect; a peripheral bus providing a high-speed data path between the CPU and peripheral devices (such as monitor, disk drive, or network).

LL. PDF: (Portable Document Format.) The file format used by the Acrobat document exchange system software from Adobe.

MM.PIV: Personal Identification Verification

NN. PIV-I – PIV Interoperable credential; being phased out and will not be re-issued

OO. PPS: Protocol and Parameters Selection

PP. RF: Radio frequency.

QQ. ROM: Read-only memory. ROM data are maintained through losses of power.

RR. RS-232: A TIA/EIA standard for asynchronous serial data communications between terminal devices. This standard defines a 25-pin connector and certain signal characteristics for

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 19

interfacing computer equipment.

SS. RS-485: A TIA/EIA standard for multipoint communications; must be shielded IAW FIPS

TT. TCP/IP: Transport control protocol/Internet protocol incorporated into Microsoft Windows.

UU. TPDU: Transport Protocol Data Unit

VV. TWIC: Transportation Worker Identification Credential

WW.UPS: Uninterruptible power supply.

XX. V C C : Voltage at the Common Collector

YY. WAN: Wide area network.

ZZ. WAV: The digital audio format used in Microsoft Windows.

AAA. Wiegand: Patented magnetic principle that uses specially treated wires embedded in the credential card.

BBB. Windows: Operating system by Microsoft Corporation.

CCC. Workstation: A PC with software that is configured for specific limited security system functions.

1.7 MAINTENANCE & SERVICE

A. General Requirements

1. The Contractor shall provide all services required and equipment necessary to maintain the entire integrated electronic security system in an operational state as specified for a period of one (1) year after formal written acceptance of the system. The Contractor shall provide all necessary material required for performing scheduled adjustments or other non-scheduled work. Impacts on facility operations, see also General Project Requirements.

B. Description of Work

1. The adjustment and repair of the security system includes all software updates, panel firmware, and the following new items computers equipment, communications transmission equipment and data transmission media (DTM), local processors, security system sensors, physical access control equipment, facility interface, signal transmission equipment, and video equipment.

C. Personnel

1. Service personnel shall be certified (CSEIP) in the maintenance and repair of the selected type of equipment and qualified to accomplish all work promptly and satisfactorily. The

Resident Engineer shall be advised in writing of the name of the designated service representative, and of any change in personnel. The Resident Engineer shall be provided copies of system manufacturer certification for the designated service representative.

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 20

D. Schedule of Work

1. The work shall be performed during regular working hours, Monday through Friday, excluding federal holidays. These inspections shall include:

a) The Contractor shall perform two (2) minor inspections at six (6) month intervals or more if required by the manufacturer, and two (2) major inspections offset equally between the minor inspections to effect quarterly inspection of alternating magnitude.

1) Minor Inspections shall include visual checks and operational tests of all console equipment, peripheral equipment, local processors, sensors, electrical and mechanical controls, and adjustments on printers.

2) Major Inspections shall include all work described for Minor Inspections and the following: clean all system equipment and local processors including interior and exterior surfaces; perform diagnostics on all equipment; operational tests of the

CPU, switcher, peripheral equipment, recording devices, monitors, picture quality from each camera; check, walk test, and calibrate each sensor; run all system software diagnostics and correct all problems; and resolve any previous outstanding problems. Update system’s Firmware/software to the latest version available.

E. Emergency Service

1. The owner shall initiate service calls whenever the system is not functioning properly.

The Contractor shall provide the Owner with an emergency service center telephone number. The emergency service center shall be staffed 24 hours a day 365 days a year. The

Owner shall have sole authority for determining catastrophic and non-catastrophic system failures within parameters stated in General Project Requirements.

a. For catastrophic system failures, the Contractor shall provide same day four (4) hour service response with a defect correction time not to exceed eight (8) hours from emergency service call. Catastrophic system failures are defined as any system failure that the Owner determines will place the facility(s) at increased risk.

b. For non-catastrophic failures, the Contractor within eight (8) hours with a defective correction time not to exceed 24 hours from notification.

F. Operation

1. Performance of scheduled adjustments and repair shall verify operation of the system as demonstrated by the applicable portions of the performance verification test.

G. Records & Logs

1. The Contractor shall maintain records and logs of each task and organize cumulative records

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 21

for each component and for the complete system chronologically. A continuous log shall be submitted for all devices. The log shall contain all initial settings, calibration, repair, and programming data. Complete logs shall be maintained and available for inspection on site, demonstrating planned and systematic adjustments and repairs have been accomplished for the system.

H. Work Request

1. The Contractor shall separately record each service call request, as received. The record shall include the serial number identifying the component involved, its location, date and time the call was received, specific nature of trouble, names of service personnel assigned to the task, instructions describing the action taken, the amount and nature of the materials used, and the date and time of commencement and completion. The Contractor shall deliver a record of the work performed within five (5) working days after the work was completed.

I. System Modifications

1. The Contractor shall make recommendations for system modification in writing to the

COR/CO. No system modifications, including operating parameters and control settings, shall be made without prior written approval from the COR/CO. Any modifications made to the system shall be incorporated into the operation and maintenance manuals and other documentation affected.

1.8 PERFORMANCE REQUIREMENTS

A. PACS shall provide support for multiple authentication modes and bidirectional communication with the reader. PACS shall provide implementation capability for enterprise security policy and incident response.

B. All processing of authentication information must occur on the “safe side” of a door

C. Physical Access Control System shall provide access to following Security Areas:

1. Controlled

2. Limited (Time sensitive)

3. Exclusion

D. PACS shall provide:

1. One authentication factor for access to Controlled security areas

2. Two authentication factors for access to Limited security areas

3. Three authentication factors for access to Exclusion security areas

E. PACS shall provide Credential Validation and Path Validation per NIST 800-116, federal agency to

PROJECT #: 671A4-21-700

PHYSICAL ACCESS CONTROL SYSTEM 28 13 00 - 22

operate as government-wide interoperable enterprises.

F. Distributed Processing: System shall be a fully distributed processing system so that information, including time, date, valid codes, access levels, and similar data, is downloaded to

Controllers so that each Controller makes access-control decisions for that Location. Do not use intermediate Controllers for physical access control. If communications to Central Server are lost, all Controllers shall automatically buffer event transactions until communications are restored, at which time buffered events shall be uploaded to the Central Server.

G. System Network Requirements:

1. Interconnect system components and provide automatic communication of status changes, commands, field-initiated interrupts, and other communications during system operations.

2. Communication shall not require operator initiation or response and shall return to…