Attachment 1_Eglin DDC System and Network with Lockable enclosure and Cybersecurity requirements 20240418.pdf

DEPARTMENT OF THE AIR FORCE

HEADQUARTERS 96TH TEST WING (AFMC)

EGLIN AIR FORCE BASE FLORIDA

18 April 2024 Energy Management Control System (EMCS) and/or Direct Digital Control (DDC) System

Requirements for New Facilities

1. Provide building level supervisory controllers based on Eglin’s existing Niagara 4.0 version matching the current Niagara framework of our DDC Enterprise Network Server (ENS). The building level supervisory controllers shall include point-2-point (P2P), Secure Socket Layer SSL, Web server and embedded Workbench (WB). All control devices shall be programmable directly from The Niagara 4 Workbench embedded toolset. The use of configurable or programmable controllers that require additional software tools or tools that require a specific Niagara 4 license brand to operate for post-installation maintenance shall not be acceptable. The building level supervisory controllers shall contain all building logic, graphics and local controller backups. JACE’s shall be installed in the mechanical room.

2. All graphics and points shall be duplicated in the existing Niagara 4.0 version 4.13 Framework ENS (Enterprise Network Server) using existing workbench software located in building 696, which shall serve as the Web Server for the system. All trended points shall be transferred via P2P to the server for history trending of points.

3. Provide Niagara Workbench software matching the current version of the DDC (ENS) server Niagara Framework software. All Software to be installed by the contractor on a government laptop or desktop provided by the 796th. Provide software and USB adapters for each type of DDC field controllers, to include factory installed DDC controllers. This laptop will be used/verified during the training. Laptop will need to be submitted to 96 CEG IT to facilitate required device security scans and uploading of Air Force Network (AFNET) standard desktop configuration (SDC) PRIOR to the contractor uploading any specialty (DDC) software.

A minimum of 7 days should be allotted to accomplish this. Once complete, the device will be returned to the contractor for DDC software installation and perform training.

4. The system shall allow Civil Engineer (CE) technicians to connect to all controllers with all available software in all modes available by the manufacturer from building 696 via the local area network (LAN) to program, backup, download, configure and perform all functions necessary to maintain the system as if onsite and direct connected to the device.

5. All hardware and software administrator level passwords shall be provided to the government to access all levels of all controllers including the new Niagara Framework controllers as well as copies of the system’s topology, hardware/software inventory, and configuration. The password shall allow complete access to everything the manufacturer has access to. Leave the default factory Platform Username and Password.

6. All field controllers shall use Building Automation and Control network (BACnet) IP protocol.

Install Field Controller backup software in the JACE.

7. Provide a LAN drop within three feet of each building level supervisory controller and provide a patch cable between the LAN drop and the building level supervisory controller.

8. When the BACnet communication buss leaves and enters a building, use fiber optic cable and provide media converter pairs (i.e. between buildings or out to chillers) and provide DB testing results.

9. The BACnet communication buss shall be daisy chained to the JACE. No additional switches or routers shall be used.

15 Nov 2021

Requirements for Existing Facility Remodels

1. Modifications to an existing facility’s Control System (CS) must be compatible with the current CS in that facility if the new controls are connecting to existing JACE.

Whenever possible, the same brand controls should be used. If a new JACE is to be installed, the requirements for New Facilities will apply.

2. All graphics (including floor plans) must be updated in the existing ENS (Enterprise Network Server) located in building 696 which shall serve as the Web Server for the system, as well as in the JACE.

3. The system shall allow Civil Engineer (CE) technicians to connect to all controllers with all available software in all modes available by the manufacturer from building 696 via the local area network (LAN) to program, backup, download, configure and perform all functions necessary to maintain the system as if onsite and direct connected to the device.

4. Provide all Controls software necessary for project; to be loaded onto an AF provided Laptop with current SDC. Provide latest software and USB adapters for each type of DDC field controllers, to include factory installed DDC controllers. (This laptop will be used/verified during the training).

5. All hardware and software administrator level passwords shall be provided to the government to access all levels of all controllers including the new Niagara Framework controllers as well as copies of the system’s topology, hardware/software inventory, and configuration. The password shall allow complete access to everything the manufacturer has access to.

6. All field controllers shall use Building Automation and Control network (BACnet) IP protocol.

7. The BACnet communication buss shall be daisy chained to the JACE. No additional switches or routers shall be used. Ensure not to damage/cut existing Buss Line for the remainder of the facility.

Graphics Requirements

1. Graphics shall be in the existing ENS (Enterprise Network Server) located in building 696 which shall serve as the Web Server for the system, as well as in the JACE

2. Include date and time on all graphic screens.

3. Main Map Graphic- This screen will have a list and link to all the buildings on the entire Eglin AFB complex.

4. Building Graphic- This screen will have a third graphic of the front of the building and a building number. The following links are required on this page: Back to Main Map, Floor Plans, Alarms, Reports, Schedules, History, and User Service.

5. Floor Plan Graphic The floor plan will be 3D with color coded zones, room numbers, and as-built sensor and equipment locations. The following points are required on this page: room temp, room humidity, occupancy status.

The following links are required on this page: Back to Building Graphic, All Equipment (Click on sensor or equipment shown on the floor plan and the link will go to the corresponding equipment).

6. Typical VAV Table Graphic The VAV table should include the following info:

Box #, Zone Temp, Set Points (Heat & Cool), SP Source, Flow SP, Flow, Damper position, Heating %, SAT

7. Typical Equipment Graphic Include a header with equipment type and number, room numbers and area(s) served.

Include all points on the equipment graphic.

The following points will be animated: fans, dampers, coils, pumps, boilers.

All set points will have the capability of being changed from the graphic.

The following links are required on this page: Back to Floor Plan, provide a hidden link over each point to show an hourly third day trend, provide a hidden link over each point to override all outputs. Provide a link to a spreadsheet with manufacturer and part numbers and warranty dates for all parts on the equipment graphic.

8. Communication Bus Graphic Include an as-built wiring diagram of the communication buss between all controllers.

9. Provide a printed copy of the graphics prior to project training.

Eglin AFB

Energy Management Control System (EMCS) Network Requirements for New Facilities

1. Comm Squadron shall Install/Identify 2 fiber strands dedicated for DDC connectivity.

2. Contractor shall install and program a Cisco 8-port switch compatible with the Jace and

DDC (ENS). The 796th CES will provide the IP address, VLAN, username and password to the contractor. Contractor will install a fiber patch cord from the 8-port switch to the fiber ports designated by the Communications Squadron.

3. Contractor installs a wall mounted lockable network enclosure (LNE) with surge protector for a Cisco 8 port switch-- (see attached LNE Detail)] in the main Communications room mounted on the fire rated backer board.

4. Contractor installs a 20A/125V duplex receptacle within 3’ of the LNE for connection of the surge protector. This receptacle shall be connected to the emergency power panel if the building is, or will be, equipped with an emergency generator.

5. Contractor installs a single port LAN connection inside the LNE and inside each building level supervisory controller.

6. Contractor installs a 2” EMT conduit from the LNE to each building level supervisory controller in the building.

7. Contractor installs a 1 ¼” pliable raceway, w/pull string, from the LNE to a height approximately 12” above the Communications room rack. [DDC shop personnel shall install a fiber jumper from the LNE to the installed fiber patch panel].

8. Contractor installs purple Cat 5E cable from the LNE to each building level supervisory controller. Note: If the distance exceeds 100 meters between the LNE and the building level supervisory controller, the building level supervisory controller shall be moved, or fiber w/media converters must be used.

Preferred DDC Manufacturers installed on Eglin.

Trane Johnson Automated Logic Siemens Schneider