cn105-000150-00.docx
DOCX document 48 KB Posted
- Attached to
- Construction, University Drive Bike Lanes
- Solicitation number
- IFB-114424
- Issued by
- Fairfax County, Virginia
About this file
This document contains security requirements guidelines issued by the Virginia Department of Transportation (VDOT) for portable changeable message signs (PCMS) used on all projects. The guidelines establish mandatory security protocols for PCMS control cabinets, requiring Grade 3 or stronger standard locks at all times unless maintenance is actively being performed. All electronic signs must have manufacturer default passwords changed, with complex password requirements of at least 14 characters including special characters, alphabetical characters, numerical characters, and a combination of upper-case and lower-case letters where the manufacturer supports such complexity. Password credentials must never be stored, displayed, or written on or within the sign, and any QR codes affixed to signs must be removed. The Contractor must obtain Engineer authorization prior to enabling remote or wireless accessibility and must update PCMS to the most recent compatible software and firmware version before authorization. All messages posted on electronic signs must be approved and documented, with comprehensive logging of all public messages including date and time stamps.
For PCMS connected to the Department's Operations Technology network and managed by the Traffic Operations Center staff, additional security requirements apply, including digital locks on sign control cabinets, remote accessibility exclusively through secure Department OT network communications, messages posted only from Department ATMS or designated backup systems, and modification of community strings from default settings. All vendor cloud connections must be removed from connected signs, with VPN connections configured exclusively to the Department's OT network. Connected electronic signs must comply with the Cabinet Security Standards outlined in the Department's OT Cybersecurity Program Manual. The Contractor has the option to connect signs to the Department's network for centralized management, which eliminates individual sign logging responsibilities by transferring message transmission and posting records to the VDOT Advanced Traffic Management System.
View the file
Other files
Show all 49
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Guidelines: For use on all projects.
cn105-000150-00 SECURITY REQUIREMENTS FOR PORTABLE CHANGEABLE MESSAGE SIGNS— The Contractor shall secure portable changeable message sign (PCMS) control cabinets with a grade 3 or stronger standard lock at all times unless maintenance is actively being conducted on the sign.
A password shall be required to change the PCMS message. The Contractor shall change the manufacturer's default password for ALL electronic signs. Electronic signs that support the use of complex passwords shall include at least 14 characters consisting of the following criteria:
· At least one special character
· At least one alphabetical character
· At least one numerical character
· A combination of upper-case and lower-case letters
Electronic signs that do not support the use of complex passwords shall be changed using the maximum number of characters and character types permitted by the manufacturer.
Password credentials are prohibited from being stored, displayed, or written on or within the sign. Any QR codes affixed to the sign shall be removed.
For all PCMS with remote or wireless accessibility, the Engineer will authorize remote access prior to this functionality being enabled. Prior to authorization, the Contractor shall update the PCMS to the most recent compatible software and firmware version available from the manufacturer. Following authorization and prior to use, the Contractor shall establish a remote connection to verify that access to the PCMS is password protected.
Electronic signs shall only post approved and documented messages. The Contractor shall log all messages posted with date and times for each public message.
The Contractor has the option for their signs to be connected to the Department’s Operations Technology (OT) network for management by Traffic Operations Center (TOC) staff. By using this method, messages are transmitted and posted by the TOC control room staff with all records and logging managed within the VDOT Advanced Traffic Management System (ATMS). Electronic message signs connected to the OT network shall follow the security requirements described below:
1. All electronic signs connected to the network shall be secured with a digital lock installed on the sign control cabinet.
2. Connected signs shall only be remotely accessible through secure communications that originated from the Department’s OT network.
3. Connected signs shall only be posted with messages from the Department’s ATMS systems or designated backup systems.
4. Community strings (both public and private strings) shall be changed from default settings.
5. All vendor cloud connections shall be removed from the connected sign. TOC system administration staff will configure VPN connections exclusively to the Department’s OT network.
6. All connected electronic signs shall adhere to the Cabinet Security Standards found in the Department’s OT Cybersecurity Program Manual.
1-30-26 (SPCN)
File details come from the government source that posted it. Updated .