AG_94_TZ_16_0012_SOLICITATION.docx

Solicitation Number: AG-94TZ-S-16-0012 Fee Collection Services Tonto National Forest

QUOTER COVER SHEET/CHECKLIST

This requirement is being procured under Part 13, Simplified Acquisition Procedures

QUOTATIONS ARE TO BE RECEIVED BY THE DUE DATE AND TIME.

NO PAPER DOCUMENTS OVER 8 ½ X 11, AND NO BROCHURES ARE TO BE SUBMITTED AS PART OF YOUR QUOTE.

QUOTERS ARE TO RETURN to the address in Block 9 of the SF 1449:

1. Completed SF 1449

2. Completed Part 1- The Schedule (Pricing)

3. Addressed Evaluation Factors

4. This page with the following questions answered:

· HAVE YOU OBTAINED A DUNS NUMBER?____________________________________

· WHAT IS YOUR DUNS NUMBER?_____________________________________________

· WHO IS YOUR CONTACT POINT? NAME_____________________________________

· PHONE________________E-Mail_________________________

· ARE YOU REGISTERED IN SAM?

· Have you completed your annual recertification requirements?________

· https://www.sam.gov/portal/public/SAM/

· There is no fee to register on the official government web site.

· Is your banking information correct and current in SAM?___________________

· NOTE: Failure to obtain a DUNS number and register in SAM by the quotation due date will result in the quoter being ineligible for award of a contract. Quoters are encouraged to promptly obtain a DUNS number and register in SAM now, if submitting a quotation to this solicitation.

· HAVE YOU READ THE STATEMENT OF WORK AND ADDRESSED ALL OF THE SUBMITTAL INFORMATION AND EVALUATION INFORMATION?____________

· ACKNOWLEDGE AMENDMENTS (See amendments for proper acknowledgement). Monitor FBO.gov for any amendments issued.

There will be a pre-quote meeting on October 12, 2016 at 10:00 a.m. local time. We will meet at the Mesa Ranger District Office, 5140 E. Ingram Street, Mesa, AZ, 85205 Phone number: 480-610-3300.

All technical questions must be submitted in writing no later October 17, 2016 at 4:30 p.m. local time.

Base Period: November 15, 2016-November 14, 2017

Qty

(all machines)

2.4.1 System Administration

2.5 PCI Compliance for Services

4.0 Compliance Requirements

Total Base Year

Option Year 1: November 15, 2017 through November 14, 2018

(all machines)

2.4.1 System Administration

2.5 PCI Compliance for Services

4.0 Compliance Requirements

Total Option Year 1

Option Year 2: November 15, 2018 through November 14, 2019

Qty

(all machines)

2.4.1 System Administration

2.5 PCI Compliance for Services

4.0 Compliance Requirements

Total Option Year 2

Option Year 3: November 15, 2019 through November 14, 2020

Qty

(all machines)

2.4.1 System Administration

2.5 PCI Compliance for Services

4.0 Compliance Requirements

Total Option Year 3

Option Year 4: November 15, 2020 through November 14, 2021

Qty

(all machines)

2.4.1 System Administration

2.5 PCI Compliance for Services

4.0 Compliance Requirements

Total Option Year 4

Automated Fee Machine Purchase for the Tonto National Forest

Furnish all labor, installation, supervision, transportation, automated fee collection machines and other equipment and incidentals necessary for the Tonto to collect, count and deposit fees in compliance with the requirements herein.

CONTRACT TERM: Base Period plus four option year periods.

I. SCHEDULE OF SUPPLIES/SERVICES

The US Department of Agriculture Forest Service, Tonto National Forest (Tonto) intends to purchase Automated Fee Collection Machines (AFMs) and the associated software licenses for collecting recreation fees at fee-for-use recreation sites. The AFM, AFM network and management software shall be user friendly for fee paying visitors while providing intuitive reporting tools to document sales activities and deposit funds into a government account. The Tonto intends to implement a Quick Pick / Pay and Display model for payment and proof of payment of recreation fees. Each AFM shall accept credit card payments only.

Refer to Schedule of Bid Items in Appendix A.

II. PERFORMANCE WORK STATEMENT

Purpose and Scope The purpose of this solicitation is to respond to stated public desire to pay recreation fees within or near fee-for-use recreation sites on the Tonto National Forest. This will be accomplished by purchasing and installing a network of AFMs that will accept credit card only fee payments and provide individual receipts as proof of payment- pay and display.

The scope of this acquisition is for the purchase, installation and network configuration of thirteen (13) solar powered industry standard pedestal mounted AFM units and three (3) mobile/handheld AFM units, the associated hardware and software necessary to collect fees, make deposits, provide revenue and accounting services, and extended warranty coverage. The Contractor shall provide all necessary software, hardware, installation, integration, warrantable repairs, training, and technical support for the AFM units and the network. Each AFM and associated software shall be capable of performing credit card transactions in compliance with the relevant federal IT security, credit card security, and other federal requirements described in Section 4.0 Compliance Requirements.

Each pedestal mounted AFM shall be installed at locations identified by the Tonto or in locations where the Contractor and the Tonto agree are more suitable for data connectivity or electrical connectivity, or provide a greater value to the customer. The Tonto will make the final determination of where each AFM will be installed. The Contractor may propose using refurbished AFMs in order to reduce costs and recycle materials. See Section 3.6.1 – 3.6.3 for requirements of the cabinets.

Each AFM shall sell and provide proof of payment for Onsite Tonto Pass products including the Onsite Tonto Daily pass, Onsite Tonto Boat Launch pass, the Tonto Walk-in Camping pass and the Half-priced Tonto Walk-in Camping pass. Each AFM and the associated management software shall have the capacity to sell additional products should the Tonto decide to do so in the future. Each AFM shall have the capacity to process transactions in English and Spanish.

This acquisition must be compliant with the Payment Card Industry (PCI) Data Security Standards (requirements for consumer data protection in credit card processing); requirements of OMB Circular A-123 (“Management’s Responsibility for Internal Control”), Federal Information Systems Management Act (FISMA) IT Security, Americans Disabilities Act (ADA), and Section 508 of the Rehabilitation Act requirements, and the 2014 Presidential Executive Order, which requires that federal agency payment card acceptance must include EMV chip and PIN capability to strengthen the security of retail payments.

The Contractor shall furnish all labor, supervision, transportation, and other incidentals as necessary to install and configure each AFM to be managed by the Tonto. Pedestal mounted AFMs will be installed within or near fee-for-use day-use sites and developed campgrounds on the Tonto National Forest (Table 1 and Appendix B- Maps).

1.0. Automatic Fee Machine (AFM)

The Contractor shall sell thirteen (13) pedestal mounted AFMs and three (3) mobile/handheld AFMs for a total of sixteen (16) AFM units to the Tonto National Forest. Each AFM unit and associated software must meet the requirements within this Statement of Work (SOW). Table 1 lists locations where the pedestal Mounted AFMs will be installed and the anticipated power supply and data connectivity of each AFM. Appendix B is a location map of planned AFM sites and Appendix C is a series of photographs showing specific installation locations.

Table 1: Fee site name by district for installation of pedestal mounted AFMs.

CAVE CREEK RANGER DISTRICT

GLOBE RANGER DISTRICT

MESA RANGER DISTRICT

Cell Service variable – depends on uncontrollable factors that affect reliability – such as number of users, weather

TONTO BASIN RANGER DISTRICT

Cell Service variable – depends on uncontrollable factors that affect reliability – such as number of users, weather

Cell Service variable – depends on uncontrollable factors that affect reliability – such as number of users, weather

Cell Service variable – depends on uncontrollable factors that affect reliability – such as number of users, weather

Cell Service variable – depends on uncontrollable factors that affect reliability – such as number of users, weather

Each AFM shall be programmed to sell products, accept credit card payment only, produce a receipt as proof of payment, and provide reports on sales, transactions and deposits by individual machine and by the network as a whole.

1.1 Wireless Data Connections (Cellular connectivity vs Satellite connectivity) Wireless data connectivity varies between AFM locations on the Tonto. All pedestal mounted AFMs and mobile/handheld AFMs shall maintain a continuous wireless data connection via cellular signal or satellite signal. All AFM fee transactions, sales reporting, and AFM configurations shall occur via a wireless internet connection to the AFM. The Tonto has estimated the appropriate wireless data connection option for each permanently installed AFM (Table 1.). However, the Contractor may recommend the most appropriate wireless data connection based on the Contractor’s knowledge of their AFM’s and the planned location of each AFM on the Tonto. The Tonto will not provide wireless network connection to the AFMs.

Should data connectivity become unavailable to obtain authorizations, the AFM software shall securely (according to PCI DSS Standards) capture, process, store, and forward the credit card requests upon reconnection with the network to the authorizing bank.

1.2 Installation Plan and Configuration

1.2.1 Installation Plan

The Contractor shall gather information and provide an installation plan to the Tonto which identifies the following:

· Number of days/weeks necessary to install and configure thirteen pedestal mounted AFMs and configure three mobile/handheld AFMs,

· Date of availability to begin installation and anticipated date of completion

· Optimal location and orientation of solar systems for each AFM requiring solar as a primary power source or as a back-up power source;

· Optimal wireless data connectivity option for each of thirteen pedestal mounted AFMs and three mobile/handheld AFMs (Cellular or Satellite connectivity);

· Advance site preparation requirements prior to installation of pedestal mounted AFMs including, but not limited to, foundation and mounting requirements, electrical or solar requirements, and wireless data connectivity;

· Recommendations for minimizing vandalism, theft and damage to AFMs including cabinets, screens, foundations or pedestals, solar systems, electrical connections, etc.;

· Identify all other peripheral materials and supplies necessary to install and operate thirteen pedestal mounted AFMs. (i.e. receipt paper, card readers, accounting and management software, etc.);

· Identify all peripheral materials and supplies necessary to implement three mobile/handheld AFMs (i.e. receipt paper, card readers, etc.);

· Describe key components and milestones for AFM and network configuration including AFM electrical and data systems testing and verification;

· Identify key training milestones for operation, finger-tip maintenance and management of pedestal mounted and mobile/handheld AFMs and associated software;

· Any logistical considerations necessary to conduct onsite training at a Tonto location for operation of pedestal mounted AFMs and mobile/handheld AFMs such as audio/visual needs, internet connectivity for personal computers, projectors.

1.2.2 AFM System Configuration

The Contractor shall gather the necessary information from the Tonto to configure the AFM network for a Quick Pick / Pay and Display model to sell Onsite Tonto Pass products, make deposits to the appropriate financial institution, and report on transactions and accounting, and trouble shooting. At a minimum, this shall include:

· Configure AFMs to process transactions in English and Spanish

· Configure AFMs and network for the sale of Onsite Tonto Daily Passes, Onsite Boat Launch passes, Walk-in Camping passes and Half-Priced Walk-in Camping passes;

· Product pricing for each pass type;

· Receipt configuration and printing;

· “Quick Pick” prompts for customers to identify and purchase the correct pass;

· Simple prompts for customers to purchase single passes, multiple passes of the same type of pass, and multiple passes of different types in a single transaction;

· Accounting reports by individual AFM and by entire AFM network;

· Printing multiple receipts per transaction (either the same or different);

· Statistical report generation by AFM and by entire AFM network;

· Revenue account information by AFM and by entire AFM network;

· Tender types accepted;

· User Roles and Access controls;

· Credit card merchant identification (ID) account number, and authorization for real time transaction processing;

· Audible and silent alarm notifications to appropriate personnel for vandalism and theft

· AFM malfunction and maintenance notifications to appropriate personnel.

1.2.3 Testing of AFM Configuration

Prior to the AFM network being placed into operation, the Contractor shall demonstrate successful configuration of thirteen (13) pedestal mounted AFMs and three (3) mobile/handheld AFMs. The Contractor shall provide an installation flowchart or check-list of actions necessary for successful AFM installation and configuration that includes systems testing and verification of electrical connectivity, wireless data connectivity, Onsite Tonto Pass product selection menus, Onsite Tonto Pass product sales, and credit card processing.

The Contractor shall ensure that credit card merchant account authorizations and settlements are properly configured, and that each transaction is deposited into the proper Government account with USFS COR access.

1.3 Installation and Operation

The Contractor shall install each of thirteen pedestal mounted AFM units at the proper location as determined by the Tonto with input from the Contractor. The Tonto has the final decision with regards to the location of all AFM units.

The Contractor shall install and configure each of the AFM units and test them for data connectivity, proper sales transactions, credit and debit card processing, and assurance that each AFM unit is able to transmit data to the Tonto and to the identified FS COR. This includes ensuring credit card transactions have been properly authorized and settled and funds transferred to the correct account.

The Contractor shall have four weeks within which to install and make operational each of the sixteen units. Installation will be scheduled quickly upon notifying the Contractor of a winning bid.

A post installation report is required and shall provide the following:

· List of AFM units by fee site name and unique identifier name;

· Any follow-up items that need to be completed by the Contractor or the Tonto;

· Any notes, obstacles or foreseeable challenges identified during the installation process;

· Acceptance document with outstanding items to complete for the Tonto Contracting Officer;

· Representative to sign for acceptance that the installation is complete

1.3.1 Install According to Payment Application Data Security Standard (PA-DSS) Implementation Guide

The Contractor shall install any payment systems in accordance with the PA-DSS Implementation Guide for the credit card application that has been incorporated into the system being installed, and shall deliver:

· The Payment Card Industry Implementation Guide for the credit card payment application that has been incorporated into the delivered system.

· Written assurance that the system has been implemented and installed according to the PA-DSS Implementation Guide.

2.0 Training, Documentation, and System Support

The Contractor shall provide comprehensive system operation and maintenance training to Tonto representatives prior to the deployment of the AFM system.

2.1 Administrator Training

2.1.1 Onsite Training

The Contractor shall provide onsite training to Tonto staff on the use and maintenance of the AFM units and associated systems. In particular, the Contractor shall conduct at least one session of end-user operational training on-site concurrent with the installation period. The training shall cover at least the following:

· Customer operation of AFM units;

· Administrative operations of AFM units;

· Maintaining and troubleshooting AFMs;

· Replacing printer paper;

· Replacing modular parts such as printers and card readers;

· Training on all software and associated systems used to produce financial, accounting and sales reports from individual AFMs and the entire AFM network.

The Contractor shall provide a training agenda with stated objectives and outcomes for each training session. The Contractor shall provide an electronic version in Microsoft Word or PowerPoint of the training materials and at least five (5) copies of printed training materials.

2.1.2 Ongoing Training

In order to support the standardization and effective operations of the AFM network, the Contractor may also propose periodic remote training opportunities via a conference line and web conferencing link. These training modules may be used to train new employees or to improve operations post-implementation.

2.2 Manuals and Documentation

2.2.1 PA-DSS Implementation Guide

The Contractor shall deliver the Payment Card Industry Implementation Guide for the credit card payment application incorporated into the delivered system.

2.2.2 AFM Unit Manuals

The Contractor shall deliver one printed copy and one copy in electronic form user manuals documenting all functions of the AFM units including operations, programming of products and users, maintenance, and troubleshooting.

2.2.3 Updated Manuals and Documentation

Updated manuals shall be delivered within 30 days of any operational or technical changes to pedestal mounted AFMs, mobile/handheld AFMs, operational software or reporting software. If the change is minor, a technical bulletin will be acceptable until major changes warrant a new manual to be provided.

2.3 Technical Support

2.3.1 Service Level Agreement (SLA)

The Contractor shall provide support for the AFM and associated systems to the Tonto. Items covered in an SLA shall include:

· Support Mode: Methods by which FS may access and receive service from the Level 1 (front-line) support.

· Service Availability: Days and times in which Level 1 support is available including after-hours.

· Time to Answer: Average and maximum time users will have to wait before being able to speak with a Level 1 Support Representative.

· Access to AFM’s: Describe how the technical support personnel will access the USFS’s AFMs, if needed, to provide support.

· Issue Resolution Time: Average and maximum time between report of an issue and resolution.

· Customer Satisfaction: Average customer satisfaction level for technical support calls, along with methods of assessment.

The Contractor’s proposal may propose a varying degree of SLA options along with any associated costs.

2.3.2 Maintenance Plan

The Contractor shall provide a general Maintenance Plan for the AFM network. This plan shall include:

· Fingertip maintenance: Contractor shall describe fingertip maintenance protocols such as AFM condition inspections, printer and card reader cleaning and replacement, printer paper replacement, and simple AFM diagnostics and resets and any other actions necessary to maintain AFMs on a daily basis.

· Other maintenance: Contractor shall describe any major and minor service schedule intervals (monthly, quarterly, semi-annually, annually) the maintenance tasks that will be performed

2.3.3 Warranty

The Contractor shall provide an extended warranty for the AFM hardware and software. Items covered in the warranty shall include:

· Cost of warranty per year

· Duration of warranty

· List of all items covered

· List of all items not covered

· Date when warranty begins and ends

· Warranty reporting procedures

· Maximum time from defect report to equipment replacement or repair

· Duration of warranty for replaced equipment

· On-site vs. remote warranty service

· Cost and process for extended warranties

· How the Warranty addresses vandalism or Acts of God

· Any other extended warranty options

2.3.4 Return Material Authorization (RMA)

The Contractor should provide a description of their Return Material Authorization (RMA) process.

2.4 System Administration

2.4.1 Data Connectivity Off of the United State Forest Service (USFS) Network AFM data connectivity shall occur outside of the USFS Network. The Contractor shall provide the system administration of cellular and satellite wireless connectivity for each AFM. System administration is defined as:

· Maintenance of firewall configuration on the deployed solution to prevent unauthorized access (Data Security Standard (DSS) Requirement 1);

· Initial and ongoing configuration management and hardening of the underlying operating system (DSS Requirement 2);

· Protection of stored credit card information (DSS Requirement 3);

· Update of antivirus software (DSS Requirement 5);

· Updates and patching of operating system and other critical software (DSS Requirement 6)

· Backup and disaster recovery of data;

· Logical access control, user account management, password and account lockout management, and management of access control lists (DSS requirements 7 and 8);

· Secure remote access using two-factor authentication (DSS Requirement 8.3);

· Monitoring of severe security and incident reporting (DSS requirement 10);

· Vulnerability scanning and management – internal only (DSS Requirement 11.2);

· Host intrusion detection/prevention (DSS Requirement 11.4);

· File integrity monitoring (DSS Requirement 11.5);

2.5 PCI Compliance for Services

Providers of the services in this section shall provide services in a PCI-compliant manner. See Section 4.1.2 for details on requirements for demonstrating PCI compliance.

3.0 Functional Requirements

The functional requirements section defines the requirements the AFM units shall meet.

3.1 AFM Unit Functional Requirements

This solicitation is for a Quick Pick / Pay and Display type of sales transaction.

3.1.1 Ease of Transaction Processing

The AFM shall implement a fast and user friendly interface in English and Spanish to prompt the customer through purchasing a product, making payment through the programmed tenders, and obtaining a receipt for payment. The prompts of the menu and design of the machine should be completely self-explanatory to the customer where additional signage is not needed to walk the user through selecting the appropriate item, paying, and obtaining their receipt.

3.1.2 Product Pricing

Each AFM shall be configured to sell products with different prices (i.e. $12 for an Onsite Tonto Daily pass, $18 for an Onsite Tonto Daily plus Boat Launch pass, and individually priced campground passes ranging from ($10-$25/night for a single campsite and $20-$50/night for a double campsite). Tonto staff, with the appropriate user rights, shall be able to change the pricing for each product.

Each AFM shall be capable of selling multiple products during a single transaction; such as multiple Onsite Daily passes and multiple Boat Launching passes. AFMs shall also sell combinations of passes such as Onsite Daily passes, Boat Launching passes, and camping passes in a single transaction. Each Walk-in Camping pass purchase will produce two receipts. One will be displayed at the campsite and the other will be displayed on a vehicle dashboard AFMs shall be able to print the appropriate individual receipts for each unique pass for any unique combination of passes sold.

3.1.3 Multiply Price Charged by Quantity Entered

Each AFM shall be configured to multiply a programmed price by an item quantity, entered by the visitor, and calculate a total price for the items being purchased. Prompts shall guide the customer through the selection menu and allow them to select the quantity of the product they want i.e. “How many Daily Passes? How many Boat Launch Passes? How many nights of Camping?” The AFM shall calculate the total price and display a total amount for the purchase.

3.1.4 Calculate Expiration Date & Time for Valid Until Date

Each AFM shall calculate the expiration date and time of each product sold. Each AFM shall print an expiration date and time on the receipt based on product type:

· Tonto Onsite Daily: 24 hours from time of purchase;

· Tonto Boat Launching: 24 hours from time of purchase;

· Walk-in Camping: The expiration date is calculated based on the number of nights purchased. Check-in time for walk-in camping passes is 12pm. Check-out time is 10am on the last day of visitation.

The Tonto staff, with the appropriate user rights, shall be able to change the expiration dates and times for each product type.

3.1.5 Tender Processing

Each AFM shall support the processing credit and debit cards only (Visa, MasterCard, Discover, American Express, and JCB). Credit and debit cards shall be the only form of tender accepted. Cash will not be accepted.

See Section 3.4 Credit Card Processing and 4.1 Credit Card Compliance for further requirements.

3.1.6 Manual Entry of Credit Card Number

Each AFM shall allow a visitor or Tonto staff to manually enter the credit card payment information when the magnetic reader is unable to capture data to process a transaction. The transaction shall be included in the report as “manual entry”.

3.1.7 Payment with Same Card

Each AFM shall allow the same credit or debit card to be used more than once on the same day at any one machine and for the same dollar amount.

3.1.8 Receipts Configuration

For fraud purposes, re-printing of receipts shall be programmable at an administrative access level and not allow unauthorized users to print duplicate receipts. “Duplicate” shall be printed on all duplicate receipts printed.

3.1.9 Printed Receipts Transaction Information

All printed receipts shall include the following printed information:

· Forest Service specific configurable header with Tonto National Forest name, and district office phone number based on location of AFM;

· Camping passes shall have Campground name, loop, and site number printed on pass;

· Camping passes shall have campsite number printed on pass;

· Picnic Sites shall have “Day Use” printed on pass;

· Highly developed boat launches shall have “Boat Launch” printed on pass;

· Unique machine identifier;

· Date and time of transaction;

· Unique transaction id number;

· Line item with name and price of each product with relevant sales information, i.e. product name product price and quantity;

· Any multipliers used in the price calculation;

· Total of all transactional lines for receipt total;

· Type of credit card tenders following the credit card industry requirements;

· Calculate and print in larger and bold text the valid until date and time: “Month, Day Year, Time” of the product based on a specific period of time; (i.e. Onsite Tonto Pass and Onsite Boat Launching are valid for 24 hours from time of purchase, check-in for a single night of Walk-in camping is 12pm and check-out time is 10:00am the following day);

· Variable footer message of at least five (5) lines specific to the item(s) purchased;

See Section 3.6.7 Receipt Paper for further requirements.

3.1.10 Number of Receipts to Print

Each AFM shall print the correct number of receipts for the unique products purchased. For example, one receipt prints for an Onsite Tonto Daily pass and one receipt prints for an Onsite Tonto Boat Launch Pass. The Tonto staff, with the appropriate user rights, shall be able to change the number of receipts to print for each product.

3.1.11 Out of Receipt Paper

Each AFM shall monitor the receipt paper and not allow a transaction to be completed if the printer is out of paper or in the event of a paper jam. In the event of an “out of paper” scenario or paper jam scenario, a message shall direct the visitor to contact a Tonto district office where the AFM is located. Upon replacement or reloading of receipt paper, the AFM unit shall capture the transaction and print the receipt. Each pedestal mounted AFM shall send a “low paper” warning message to the designated Forest Service representative responsible for maintaining that machine.

3.1.12 Transaction Data Capture

Each AFM shall capture and document all transactional data for reporting purposes, including but not limited to:

· Unique AFM identifier;

· Date and time of transaction ;

· Unique transaction id number;

· Product(s) sold;

· Tender type paid;

· Tender amount paid;

· Credit card authorization number OR identify if it has been rejected.

3.1.13 Cancel or Abort Transaction

After a transaction has been initiated by the visitor but prior to the tender being completed they shall be able to cancel (abort) a transaction. This action shall not print a receipt.

3.2 User Access Management

The AFM shall implement user access control according to FISMA, USFS IT Security, and PCI DSS requirements. The following are the user access requirements for the AFM.

3.2.1 Create Authorized Users by Security Functions

The Contractor shall have the ability to create administrative AFM system users so they can be identified and authenticated with a unique password. The following requirements apply:

· Creation of appropriately credentialed users to assign permissions or designated level of “read/write” access. For example, a manager level user create, modify, terminate, or delete user accounts but a fee collector cannot;

· There shall be a protocol to terminate user access;

· Only user accounts without any historical transactions may be deleted;

The user is authorized to perform specified functions in the system (i.e. generate reports, perform collections, change sites, access product configuration, tender acceptance, apply updates or patches as system administrators).

3.2.2 Generate list of authorized users

The AFM shall be able to generate a list of users currently authorized to access the AFM and their level of access.

3.2.3 Password Requirements

The AFM shall enforce password requirements, including:

· Minimum and maximum length of password;

· Minimum and maximum lifetime of password;

· Password composition requirements for numeric and special characters;

· Number of passwords that cannot be reused.

A user with an active account shall be able to create a unique password that should be logged for reporting purposes. The AFM shall allow a user to change his/her own password.

3.2.4 Authentication and Tracking

The AFM shall authenticate all users and track all AFM activities to the user, location, and USFS level. Authentication shall include each user having a unique password they have chosen for completing their user login.

3.3 “Quick-Pick” Programming Quick Pick programming provides a list of products that can be quickly selected for purchase. All SOW requirements apply.

The initial AFM items for sale shall be: Tonto Onsite Daily pass, Tonto Onsite Boat Launch pass, Tonto Onsite Developed Walk-in Camping pass, Half-price Tonto Walk-in Camping Pass.

Each AFM shall be programmable for additional products as needed by the Tonto National Forest in the future.

3.4 Credit Card Processing Requirements

3.4.1 Credit Card Tender Processing

Credit and debit cards shall be processed through the US Treasury’s Financial Management Systems (FMS) designated merchant processing bank and platform, and are subject to all guidelines from the US Treasury’s FMS Card Processing Rules and Regulations.

Each AFM unit shall be able to process visitor tenders of the Treasury designated credit card brands (Visa, Master Card, Discover, American Express, and JCB). The system shall be programmable to be modified in order to change the credit card brands accepted.

The US Treasury regulation (TFM 8060.20) requires all credit card transactions collected by or on behalf of the Government shall be deposited into a US Treasury account.

3.4.2 Credit Card Authorization

When a PD/SSL connection is available, the process of obtaining the credit card authorization (when online) and printing the receipt shall occur in less than five seconds.

The AFM shall be able to obtain a credit card authorization in under fifteen (15) seconds. Otherwise, it shall complete the transaction in an offline store and forward mode.

3.4.3 Offline Store and Forward

When connectivity is not available to obtain authorization, the AFM software shall securely (according to PCI DSS Standards) capture, process, store, and forward the credit card request upon reconnection with the network to the authorizing bank.

The AFM shall validate a credit card number captured through a swiped or manually entered transaction and confirm it has been captured correctly and is a viable number.

Any transaction stored in the offline mode and then rejected shall be documented and included in sales and transaction reports.

3.5 Reports

The AFM shall produce a variety of reports to assist with transaction reporting. Minimum required reports include:

· Financial reports based on product purchased by day of sale and tender type processed (i.e. authorized credit card*);

· Credit card sales settlement report shall correlate to the bank’s auto close settlement time;

· Daily, Weekly, Monthly, quarterly, and annual financial summaries;

· Detailed record of transactions through a transaction log including rejected transactions;

· Refund reports;

· Transactions stored in the offline mode and then rejected.

*Identified reports shall be available to print from the AFM with the appropriate user permissions.

3.5.1 Report Format

Reports printed at the AFM shall be print ready to print to the receipt printer.

Reports printed from the AFM software to a local or networked printer shall be print ready. Thus the user shall not need to page format the data prior to printing.

Reports shall include the following basic information for the report on each page:

· Title of report;

· Date and time report was generated;

· Page number.

Reports printed from the AFM software shall be able to be saved or exported at a minimum in the following formats:

· Portable Document Format (PDF);

· Microsoft Word (version 2010 or earlier);

· Microsoft Excel (version 2010 or earlier).

3.5.2 Report Generation by Filters

The AFM software shall generate reports by filters such as:

· Unique machine identifier;

· Date and time ranges;

· Product(s) sold;

· Quantity sold;

· Revenue generated.

3.5.3 Transactional Sales Data Reports

The AFM software shall generate reports by any combination of the following user selected data:

· Unique machine identifier;

· Date and time of transaction;

· Unique transaction id and number;

· Product(s) sold;

· Transaction type (sale, refund, exchange, etc.);

· Total charge per transaction;

· Credit Card Merchant Identification Number (MID).

3.5.4 User Accounts

The AFMs shall generate reports to provide a complete list of the following:

· All authorized users with their role;

· All deactivated users;

· Date and time of user account creation;

· Last user account modified date.

3.5.5 Remote Monitoring

Each AFM shall have the capability to be monitored remotely by the Tonto and it’s COR to ensure the machine is functioning properly and to retrieve reports.

3.6 Technical Requirements of AFM Hardware:

The following section documents requirements of all AFM unit hardware delivered under this SOW.

3.6.1 Cabinet

The AFM cabinet and layout of the display and components shall be designed to be durable to withstand harsh environmental conditions including ambient temperatures up to 125° Fahrenheit and be user friendly to the customer and employee maintaining the machine, and be tamper/theft resistant.

The cabinet and all components used by the visitor to complete a sale (i.e. display, keypad, etc.) shall meet Americans Disabilities Act (ADA) accessibility requirements (See Section 4.3) and Section 508 of the Rehabilitation Act (see Section 4.2).

3.6.1.1 Pedestal for the Cabinet

The Tonto prefers the Contractor to install AFMs at the Tonto preferred locations; however, the Contractor may propose an alternative location/orientation for AFMs that is more efficient, cost effective, user friendly, or has improved connectivity. Upon technical review, the Tonto will approve or deny any Contractor recommended modifications to AFM location or orientation. See Table 1 for a description of the planned AFM locations.

Each AFM shall be securely attached to a foundation which does not allow removal without opening up the AFM cabinet.

The Contractor shall provide dimensions and requirements for installation of the cabinet with their proposal for informational purposes. This is needed in order for the Forest Service to install the correct concrete slab and bolt dimensions prior to AFM installation

3.6.1.2 Cabinet Back-up Battery

Each AFM cabinet shall have ample space to accommodate a battery back-up power source for the solar powered fee stations or for solar back-up to AC power.

3.6.1.3 Custom Paint of AFMs

Each AFM shall be painted a FS approved color. Contractor may propose options to achieve the required paint color for the cabinet color: Body color: L Pantone 175 C (red-brown); or equivalent FS approved

3.6.2 Environment Requirements

All AFMs in this solicitation shall be installed in outdoor environments. Each case shall be weather and dust resistant and have the ability to function in extreme high and low temperatures, in high humidity, dusty and wet environments, in direct sunlight, and at night. Each AFM shall be resistant to extreme environmental conditions which could cause screen and touchpad failure, card reader failure, printer failure, corrosion, rust, melting of components, paint peeling, and fading.

3.6.2.1 Dust and Water Intrusion

Dust-protection: Infiltration of dust cannot be entirely prevented, but the machine shall be adequately sealed to prevent excessive dust from entering the machine and interfering with operation.

Splashing water: Water splashing against the enclosure from any direction shall have no harmful effects.

In order to protect against dust and water intrusion into the device, each AFM shall have an Ingress Protection Rating (IP rating) of IP54.

3.6.2.2 Temperature Range Operability

Each AFM, including peripherals, shall be operable across an outside temperature range of -9° F to 125° Fahrenheit without any damage to the AFM systems.

3.6.3 Security of AFM

Each pedestal mounted AFM in this solicitation will be placed in areas that have a risk for vandalism. Each AFM shall have a vandal resistant case with a secure locking system for access into the machine. The door shall be resistant to prying or drilling and able to be secured to a permanent pedestal or foundation. Contractor may recommend additional security measures to protect machines.

3.6.3.1 Locks for the AFM

Each AFM shall have a physical lock which is tamper proof from being picked or replicated to prevent theft and protect the software and PCI DSS data. The lock cores shall be unique and may not be duplicated. If lost a new core and key shall be available for the Tonto designee to obtain additional keys and locks from the key company.

3.6.3.2 Logging of Access to AFM

Each AFM shall be able to detect when it has been opened and closed. Access into the machine shall be logged with the date and time the machine was opened and closed and what functions occurred within the software of the machine.

3.6.3.3 Security Alarm

The Contractor shall install in each AFM an internal (silent) alarm which dials to a designated number(s) and an external audible alarm to alert enforcement personnel of attempted break-ins or vandalism.

3.6.4 Display

Each AFM shall have a screen with visual prompts displaying rates and options that is Section 508 compliant. The display screen shall be user friendly, easily read from different angles and under varying lighting conditions (including bright, low or no light), resistant to extreme weather conditions, and modular for easy removal and servicing.

Each AFM keyboard shall be operable by a gloved hand.

3.6.5 Keypad

Each AFM shall have a reliable Section 508 compliant keypad which allows visitors to enter numbers for the number of items purchased.

3.6.6 Receipt Printer

Each AFM shall have a printer for printing receipts and transaction reports with the following features:

· Modular and easy to remove for repair and maintenance;

· Uses latest receipt printing…