DoDEA ESS Spec28 10 05.pdf

MILCON/Renovations of DoDEA Schools

PA00XXX

SECTION 28 10 05 Page 1

SECTION 28 10 05

ELECTRONIC SECURITY SYSTEMS (ESS)

05/16

NOTE: This section is for reference, planning, and design purposes only. AE or Design Build Contractor shall provide 100% ESS Design.

Contractor shall provide all infrastructure which includes electrified locking hardware, boxes, equipment racks, power, power supplies, uninterruptable power supplies and backup batteries, surge protection devices, conduit, and cabling for Electronic Security Systems equipment (ESS) that will be procured and installed by another Government Contractor. Designers will coordinate these requirements with Architectural, Civil, Electrical, and Information Technology/Telecommunication Divisions.

PART 1 GENERAL

1.1 REFERENCES

The publications listed below form a part of this specification to the extent referenced. The publications are referred to within the text by the basic designation only.

ASTM INTERNATIONAL (ASTM)

ASTM A123/A123M (2017) Standard Specification for Zinc

(Hot-Dip Galvanized) Coatings on Iron and Steel Products

ASTM B32 (2008; R 2014) Standard Specification for

Solder Metal

ASTM D709 (2017) Standard Specification for Laminated Thermosetting Materials

BUILDERS HARDWARE MANUFACTURERS ASSOCIATION (BHMA)

ANSI/BHMA A156.23 (2010) Electromagnetic Locks

ELECTRONIC COMPONENTS INDUSTRY ASSOCIATION (ECIA)

ECIA EIA/ECA 310-E (2005) Cabinets, Racks, Panels, and Associated Equipment

INSTITUTE OF ELECTRICAL AND ELECTRONICS ENGINEERS (IEEE)

IEEE 802.3 (2015; CORR 2017; AMD 1 2017) Ethernet

IEEE C2 (2017; Errata 1-2 2017; INT 1 2017)

National Electrical Safety Code

INTERNATIONAL ORGANIZATION FOR STANDARDIZATION (ISO)

ANSI ISO/IEC 7816 (R 2009) Identification Cards - Integrated Circuit Cards

SECTION 28 10 05 Page 2

NATIONAL ELECTRICAL MANUFACTURERS ASSOCIATION (NEMA)

NEMA 250 (2014) Enclosures for Electrical Equipment (1000 Volts Maximum)

NEMA ICS 1 (2000; R 2015) Standard for Industrial Control and Systems: General Requirements

NEMA ICS 2 (2000; R 2005; Errata 2008) Industrial Control and Systems Controllers, Contactors, and Overload Relays Rated 600 V

NEMA ICS 6 (1993; R 2016) Industrial Control and Systems: Enclosures

NATIONAL FIRE PROTECTION ASSOCIATION (NFPA)

NFPA 70 (2017; ERTA 1-2 2017; TIA 17-1; TIA 17-2;

TIA 17-3; TIA 17-4; TIA 17-5; TIA 17-6;

TIA 17-7; TIA 17-8; TIA 17-9; TIA 17-10;

TIA 17-11; TIA 17-12; TIA 17-13; TIA

17-14) National Electrical Code

NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY (NIST)

NIST FIPS 140-2 (2001) Security Requirements for Cryptographic Modules

NIST FIPS 197 (2001) Advance Encryption Standard

NIST FIPS 201-2 (2013) Personal Identity Verification

(PIV) of Federal Employees and Contractors

OPEN NETWORK VIDEO INTERFACE FORUM (ONVIF)

ONVIF (2017) Core Specification Version 17.06

TELECOMMUNICATIONS INDUSTRY ASSOCIATION (TIA)

TIA-222 (2005G; Add 1 2007; Add 2 2009; Add 3 2014; Add 4 2014; R 2014; R 2016) Structural Standards for Steel Antenna Towers and Antenna Supporting Structures

TIA-568-C.2 (2009; Errata 2010; Add 2 2014; Add 1

2016) Balanced Twisted-Pair Telecommunications Cabling and Components Standards

TIA-606 (2017c) Administration Standard for the

Telecommunications Infrastructure

U.S. DEPARTMENT OF DEFENSE (DOD)

DODI 8500.01 (2014) Cybersecurity

U.S. NATIONAL ARCHIVES AND RECORDS ADMINISTRATION (NARA)

21 CFR 1020 Performance Standards for Ionizing Radiation Emitting Products

SECTION 28 10 05 Page 3

47 CFR 15 Radio Frequency Devices

UNDERWRITERS LABORATORIES (UL)

UL 50 (2015) UL Standard for Safety Enclosures for Electrical Equipment, Non-Environmental Considerations

UL 294 (2018; Reprint Oct 2018) UL Standard for

Safety Access Control System Units

UL 437 (2013; Reprint Oct 2017) UL Standard for Safety Key Locks

UL 634 (2007; Reprint Mar 2015) Connectors and

Switches for Use with Burglar-Alarm Systems

UL 636 (2018) UL Standard for Safety Holdup Alarm Units and Systems

UL 639 (2007; Reprint May 2012) Standard for

UL

Intrusion Detection Units

(2014) Installation and Classification of Burglar and Holdup Alarm Systems

UL 796 (2016) UL Standard for Safety Printed-Wiring Boards

UL 969 (2017; Reprint Mar 2018) UL Standard for Safety Marking and Labeling Systems

UL 1076 (2018) UL Standard for Safety Proprietary Burglar Alarm Units and Systems

UL 1610 (2016) UL Standard for Safety Central- Station Burglar-Alarm Units

UL 796 (2016) UL Standard for Safety Printed-Wiring Boards

1.2 SUBMITTALS

Government approval is required for submittals with a "G" designation;

submittals not having a "G" designation are for information only. When used, a designation following the "G" designation identifies the office that will review the submittal for the Government. Submit the following in accordance with Section 01 33 00 SUBMITTAL PROCEDURES:

The USACE Electronic Security Center (ESC) will review and approve submittals requiring special review in this section.

SD-02 Shop Drawings

ESS Components; G

Overall System Schematic; G

SD-03 Product Data

SECTION 28 10 05 Page 4

Premise Control Unit; G

Detection Sensors; G

Access Control Unit; G

Access Control Devices; G

Video Intercom Devices; G

Cameras; G

Camera Lenses; G

Camera Housing and Mounts; G

Video Recording Devices; G

Printers; G

Access Credentials/Badges; G

Communications Interface Devices; G

Network Switches; G

Uninterruptable Power Supplies; G

Batteries; G

Police Alarm System (PAS) Components; G

Equipment/Component Enclosures; G

Equipment Racks; G

SD-05 Design Data

Electrical Power Calculations; G

Backup Battery Capacity Calculations; G

CCTV Storage Calculations; G

SD-07 Certificates

Data Encryption; G

SD-11 Closeout Submittals

Final 100% Design / As-built Drawings; G

SECTION 28 10 05 Page 5

1.3 QUALITY ASSURANCE

1.3.1 Regulatory Requirements

The advisory provisions in each of the publications referred to in this specification are mandatory. Interpret these publications as though the word "must" has been substituted for "should" wherever it appears.

Interpret references in these publications to the "authority having jurisdiction," or words of similar meaning, to mean the Contracting Officer.

Equipment, materials, installation, and workmanship must be in accordance with the mandatory and advisory provisions of NFPA 70 unless more stringent requirements are specified or indicated.

1.3.2 Standard Products

Provide materials and equipment that are products of manufacturers regularly engaged in the production of such products which are of equal material, design and workmanship and:

a. Have been in satisfactory commercial or industrial use for 2 years prior to bid opening, and have been utilized in applications of equipment and materials under similar circumstances and of similar size.

b. Have been available on the commercial market through advertisements, manufacturers' catalogs, or brochures during the 2-year period.

c. Where two or more items of the same class of equipment are required, provide products of a single manufacturer.

d. Provide commercial off-the-shelf (COTS) products in which the manufacturer allows a network of qualified distributors to sell, install, integrate, maintain, and repair the hardware and software products that make up the system.

1.3.2.1 Alternative Qualifications

Products having less than a 2 year field service record will be acceptable if a certified record of satisfactory field operation for not less than 6000 hours, exclusive of the manufacturers' factory or laboratory tests, is furnished.

1.3.2.2 Material and Equipment Manufacturing Date

Products manufactured more than one year prior to date of delivery to the site are not acceptable.

1.3.2.3 Product Safety

System components are to conform to applicable rules and requirements of NFPA 70. Equip system components with instruction stickers including warnings and cautions describing physical safety, and special or important procedures to be followed in operating and servicing system equipment.

1.3.3 Shop Drawings

1.3.3.1 ESS Components

Submit the ESS Components with the ESS Software submittal package. Submit

SECTION 28 10 05 Page 6 drawings that clearly and completely indicate each ESS component function that includes:

a. Termination device points

b. Interconnections required for system operation

c. Interconnections between modules and devices

d. Proposed wireway or conduit systems to be used including:

(1) Locations

(2) Sizes

(3) Types

e. Drawings showing:

(1) Device locations and spacing

(2) Mounting and positioning details

(3) Riser Diagrams with cable sizes and types

(4) Bill of Materials (Device make, model and quantities)

(5) Alarm and access control zones

(6) CCTV and sensor coverage areas

(7) Spare capacity

1.3.3.2 Overall System Schematic

Indicate the relationship of integrated components on one-line diagram and show:

a. Power source

b. System controls

c. Impedance matches

d. Interconnecting wire data including:

(1) Number

(2) Size

(3) Identification

(4) Maximum lengths

SECTION 28 10 05 Page 7

1.3.4 Evidence of Experience and Qualifications

1.3.4.1 Contractor Qualifications

Submit experience and certified qualifications data prior to installation.

Show that specific installers who will perform the work have a minimum of 2 years of experience successfully installing ESS of the same type and similar design as specified. Include the names, locations, and points of contact of at least two installations of similar type and design as specified in this document where the installer has installed such systems.

Indicate the type of each system installed. Certify that each system has performed satisfactorily in the manner intended for a period of at least 12 months.

1.4 Environmental Conditions

1.4.1 Interior Conditions

Equipment installed in environmentally protected interior areas must meet performance requirements specified for the following ambient conditions:

1.4.1.1 Temperature

0 to 50 degrees C. Components installed in unheated security protected areas must meet performance requirements for temperatures as low as minus 17 degrees C

1.4.1.2 Pressure

Sea level to 4573 m above sea level

1.4.1.3 Relative Humidity

5 to 95 percent

1.4.1.4 Fungus

Components must be constructed of nonfungus nutrient materials or be treated to inhibit fungus growth

1.4.1.5 Acoustical Noise

Components must be suitable for use in high noise areas above 100 dB, without adversely affecting their performance

1.4.2 Exterior Conditions

Components in enclosures must meet performance requirements when exposed to the following ambient conditions:

SECTION 28 10 05 Page 8

1.4.2.1 Temperature

Minus 32 to 60 degrees C

1.4.2.2 Pressure

Sea level to 4573 m above sea level

1.4.2.3 Solar Radiation

Six hours of solar radiation per day at dry bulb temperature of 60 degrees C including 4 hours of solar radiation at 0.00112 watts per square mm

1.4.2.4 Sand and Dust

Wind driven for up to 9.6 km per hour (kmph)

1.4.2.5 Rain

50 mm per hour and 125 mm per hour cyclic with wind plus one period of 300 mm per hour

1.4.2.6 Humidity

5 to 95 percent

1.4.2.7 Fungus

Warm, humid atmosphere conducive to the growth of heterotropic plants

1.4.2.8 Salt Fog

Salt atmosphere with 5 percent salinity

1.4.2.9 Wind

Continual velocity up to 80 kmph with gusts to 106 kmph, except that fence sensors must detect intrusions up to 56 kmph

1.4.2.10 Acoustical Noise

Components must be suitable for use in high noise areas above 110 dB without adversely affecting their performance. Examples areas include flight lines, runup pads, and generator sites.

1.5 SYSTEM CALCULATIONS AND ANALYSIS

1.5.1 Backup Battery Capacity Calculations

Submit calculations showing that backup battery capacity exceeds sensor operation, communications supervision, and alarm annunciation power requirements for proposed equipment plus 25 percent spare capacity.

1.5.2 CCTV Storage Calculations

Submit calculations showing the required storage capacity for each video storage device.

1.5.3 Electrical Power Calculations

SECTION 28 10 05 Page 9

Submit calculations showing the required power for ESS components for each dedicated power circuit.PART 2 PRODUCTS

2.1 SYSTEM DESCRIPTION

Provide a complete and integrated Electronic Security System (ESS) that the meet requirements of DoDEA Protection Criteria 4-010-1 and DoDEA approved standard equipment. The ACS design shall be based on the DoDEA Approved Standard Access Control System (ACS) which is currently Lenel OnGuard Version 7.4. The Police Alarm and Duress system must be compatible with Lenel OnGuard and the Installation/Base central monitoring system and monitored at the Installation/Base central monitoring station where the school is located. The Police alarm system shall dual report to both the ACS and Installation/Base central monitoring system independently. The CCTV cameras and recording device will be compatible and interoperable with the DoDEA approved version of Lenel OnGuard. ESS shall consist of the following subsystems and features:

a. Police Alarm/Duress System (PAS)

b. Access Control System (ACS)

c. Closed-circuit Television System (CCTV)

d. Security Operators WorkStation (WS)

e. Communications System

f. ESS Head-end Equipment

Include materials not normally furnished by the manufacturer with the ESS equipment as specified in:

a. Section 33 71 02 UNDERGROUND ELECTRICAL DISTRIBUTION

c. Section 26 20 00 INTERIOR DISTRIBUTION SYSTEM

2.2 PERFORMANCE REQUIREMENTS

Integrate the installed and operating subsystems into the overall ESS system to control access, provide CCTV surveillance, provide visual verification, and perform as an entity, as specified below. Provide electronic equipment that complies with 47 CFR 15 and are suitable for the environment where they will be installed.

2.2.1 Growth Capability

Provide capability for modular ESS expansion of inputs, outputs, card readers, and remote control stations with minimal equipment modification.

Software must be able to handle design requirements plus 25 percent spare capacity. Growth capability is not to be limited by the provided products.

2.2.2 Network Certification

Certify all Platform Information Technology (PIT) in accordance with DODI 8500.01 and the individual service implementation policy.

2.2.3 Maintainability

Provide components that can be maintained using commercially available tools and equipment. Arrange and assemble components to be readily

SECTION 28 10 05 Page 10 accessible to maintenance personnel without compromising system defeat resistance and with no degradation in tamper protection, structural integrity, EMI or RFI attenuation, or line supervision after maintenance when it is performed in accordance with manufacturer's instructions.

2.2.4 Availability

Provide components rated for continuous operation. Provide solid-state electronic components mounted on printed circuit boards, conforming to UL 796. Provide boards that are plug-in, quick-disconnect type. Do not impede maintenance with densely packed circuitry. Provide power-dissipating components with safety margins of not less than 25 percent with respect to dissipation ratings, maximum voltages, and current-carrying capacity. Provide solid-state type or hermetically sealed electromechanical type light duty relays and similar switching devices.

2.2.5 Fail-Safe Capability

Provide fail-safe capability in critical elements of the ESS including, but not be limited to, the capability to monitor communication link integrity and to provide self-test. Provide fault annunciation when diminished functional capabilities are detected. Annunciate fail-safe alarms to clearly distinguish from other types of alarms.

2.2.6 Line Supervision

Provide the same geographic resolution for fault isolation at the systems level as provided for intrusion detection. Provide either a static or dynamic system with active mode for line supervision of communication links of the ESS.

a. The static system must represent "no-alarm" always by the same signal, which is different than the originally transmitted signal.

b. The dynamic system must represent "no-alarm" with a signal which continually changes with time.

2.2.7 Power Loss Detection

Detect AC and DC power loss and generate an alarm when a critical component of the system experiences temporary or permanent loss of power. Annunciate the alarm at operators WS at the school and at the central monitoring station to clearly identify the component experiencing power loss.

2.2.8 Controls and Designations

Provide controls and designations as specified in NEMA ICS 1.

2.2.9 Special Test Equipment

Provide all special test equipment, special hardware, software, tools, and programming or initialization equipment needed to start or maintain any part of the system and its components. Special test equipment is defined as any test equipment not normally used in an electronics maintenance facility (i.e. Optical Time Domain Reflectometer (ODTR) Tool).

2.2.10 Electromagnetic Interference (EMI)

Configure and provide ESS components employing electromagnetic radiation constructed to provide minimal vulnerability to electronic countermeasures.

SECTION 28 10 05 Page 11

2.2.11 Electromagnetic Radiation (EMR)

Provide only ESS communication components which are licensed and approved.

Provide system components which are electromagnetically compatible.

2.2.12 Interchangeability

Use off-the-shelf components which are physically, electrically, and functionally interchangeable with equivalent components as complete items.

Equivalent, replacement components must not require new or other component modification. Do not use custom designed or one-of-a-kind items.

Interchangeable components or modules must not require trial and error matching in order to meet integrated system requirements, system accuracy, or restore complete system functionality.

2.3 ACCESS CONTROL SYSTEM (ACS)

Provide an access control system based upon the DoDEA Approved Standard Lenel OnGuard solution.

a. The primary access credential required is the Department of Defense

(DoD) Common Access Card (CAC) and is provided by the Government.

Contractor provided Commercial-off-the-shelf (COTS) visitor/temporary credentials are also required and shall be compatible with the ACS and its system configuration. Provide an ACS that meets the communications requirements of UL 1076 and UL 294 and has the capability of controlling up to 8 card readers and keypads per card controller, 128 alarm inputs, or 128 relay outputs or any components combination.

b. System is to grant or deny access based upon:

(1) CAC/PIV Card identification data

(2) Smart card identification data

(3) Identification technologies combination (Card + PIN) (where required)

(4) Input through the access control devices compared to data stored within the system

(5) Time of day, day of week, and special day and holiday scheduling with card validation override.

c. Decision to grant or deny access or exit is to be based upon authorization for such data to be input at a specific location for the current time period.

d. Provide ACS that supports the configuration and simultaneous monitoring of multiple access control devices when TCP/IP communication interfaces are used between the ESS and the primary Access Control Unit (ACU).

The events of the ACS are to be viewable as separate or as a combined list of all ESS events. Provide overall control of the ACS, alarm monitoring, and photo identification through software control of the

ESS.

e. Access control, photo imaging, and programming data must reside on a single database and instantly accessible to every networked PC workstation connected to the ESS.

f. Provide both supervised and non-supervised alarm point monitoring.

SECTION 28 10 05 Page 12

g. Provide the capability to arm or disarm alarm points both manually and automatically by time of day, day of week or by operator command and the capability to disarm alarm points based on a valid access event.

i. Provide programmable 'delay' setting for all alarm points. The alarm points are not to report an ENTRY type alarm until the delay setting has expired and not report a dwell type alarm condition until the alarm has been active for the full delay period.

j. Provide the capability to place ACU(s) in an off-line mode. In the off-line mode, the ACU(s) must retain a historical summary of all ACU activity transactions, up to the maximum capacity of the ACU memory buffer.

k. Provide the ability for manual operator control of system output relays with the manual functions to energize, de-energize, enable or disable.

l. Provide the ability to display a stored 'video image' of the cardholder based on card activity, and switch real-time CCTV camera to the card reader location for specific card usage. The card reader must not activate the door lock until positive operator acknowledgment from the

SCC.

2.3.1 ACS Badging Requirements

Include fully integrated badging capabilities that includes image capture, image editing, badge design, and badge printing. Allow for each cardholder to be assigned to both a badge design formatted for badge printing and a dossier design formatted for standard paper printing. The system must permit the storage of a photograph in the ACS user profile.

As part of the ACS Operators / Enrollment Work Station (WS), provide color badge printer capable of printing onto rolls of removable adhesive backed durable badge labels that allows a used label to be removed and the access badge reused.

Provide an initial issue of printer consumables, supplies, cleaning kits, and blank access card stock to produce a minimum of 500 badges.

2.3.2 ACS Programming

Provide software capable of, but not limited to, the following programming:

2.3.2.1 Time Schedules

Provide up to 256 user-definable time schedules. These time schedules are to determine the day(s) and times that access will be granted or a scheduled event is to occur. Any and all of the time schedules are to be available for defining access privileges and scheduled events. Provide ALWAYS and NEVER schedules that cannot be altered or removed from the system. Each user-defined time schedule must have the option of reacting or not reacting to user-defined special days, with the ability to react uniquely to each type of special day.

2.3.2.2 Special Days

Provide an unlimited number of user definable special days to be used for configuring exceptions to the normal operating rules, typically for specifying holiday operating rules. Allow for each special day to be

SECTION 28 10 05 Page 13 assigned to a user-defined type.

2.3.2.3 ACU Daylight Savings Time Adjustment

Provide a software-configurable, user defined adjustment for Daylight Savings Time. The ACU must not need to be connected to a PC workstation in order for the adjustment to occur.

2.3.2.4 Scheduled Events

Any access controlled reader is to be capable of scheduled unlock periods to allow for card-free access. The access controlled reader is to also be capable of requiring one valid access event before beginning a scheduled unlock period.

Any access control point is to be capable of requiring a valid card as well as a PIN code via keypad on a scheduled basis for higher security areas. The use of PIN via keypad functions must not reduce the number of card readers or alarm points available in the ACU(s). Any designated alarm input must be able to be scheduled Armed and Disarmed. Any relay output must be capable of scheduled ON and OFF periods to allow for automatic input and output system control.

2.3.2.5 Maximum User Capability

Up to 64,000 individual users may be given access cards or codes and have their access controlled and recorded.

2.3.2.6 Access Groups

Each system user must be assignable to a maximum of 4 of 256 possible access groups. An access group is defined as one or more people who are allowed access to the same areas at the same days and time periods.

2.3.2.7 Active and Expire Dates

Any card or user may be configured with activation and expiration dates.

The card can be assigned to any valid access group and will be activated and expired according to the specified dates.

2.3.2.8 Door Outputs

Provide each access control reader with one dedicated relay outputs. Both relays are to provide Normally Open and Normally Closed contacts. Use the first relay for electric lock control while the second is software configurable to activate for door forced open, door left open too long, duress, passback violations, invalid access attempts and valid unlock conditions. Allow for both relays to be separately programmable for energize times from 1 second to 10 minutes. The second relay must allow a delay time to be specified, causing its activation to be delayed after an activating condition occurs.

2.3.2.9 User List or Who's In (Muster Reports)

Provide the capability to generate dynamic lists of users in certain access-controlled areas, based either upon selected users or selected areas. The lists must have the option of automatically refreshing after a user-selected interval of time.

SECTION 28 10 05 Page 14

2.3.2.10 Crisis Mode

Provide support for a "crisis mode", in which user-selected alarm point activations cause changes to user access privileges. The changes to user access privileges must be configurable to restrict normal access to no access or limited access.

2.3.2.11 Door Groups

Allow up to 256 door groups to be configured. Doors belonging to the same group are be able to be locked, unlocked, disabled, and enabled on command from the ACS.

2.3.2.12 Door Interlocking

Allow a group of doors to be software configured so that if any door in the group is unsecure, all other doors are automatically disabled. This feature is also known as a "mantrap" configuration. The interlocking features must not require the ACS to be on-line for proper operation.

2.3.2.13 PIN Required

Provide support for the required use of a keypad code, in addition to a valid credential during user-selected schedules.

2.3.2.14 Remote Door Control

Provide the ESS operator the capability of manually controlling any access point by issuing a simple command from the ACS. Provide the operator the ability to lock, unlock, enable, and disable any door or Door Group in this manner. This activity is to cause an entry to be logged displaying the door name, number and time that it was performed.

2.3.2.15 Reader Disable

Provide support for disabling readers in reaction to a Police Alarm input trigger or a user-selected number of invalid access attempts.

2.3.2.16 Disable Event Messages

Allow users to disable user-selected event messages (Door Forced Open, Door Open Too Long, Door Closed, Request to Exit) for user-selected doors.

Allow users to disable certain messages (Door Forced Open, Door Open Too Long) according to a user-selected schedule.

2.3.2.17 Input and Output Groups

Allow for up to 256 user-defined (input and output) groups to be defined.

Each Input device is to be able to be linked to these groups for arming, disarming, shunting and unshunting as well as output control.

SECTION 28 10 05 Page 15

2.3.2.18 Delays

Each alarm device must allow a delay to be specified which is either an entry type or a dwell type. An entry-type delay is to prevent the input from issuing an alarm event until the delay elapses. If unarmed during the delay period, the alarm is to be ignored. A dwell-type delay requires the input to remain in the alarm state for the full delay duration before issuing an alarm.

2.3.2.19 Output Configuration

Allow each output relay to be software configurable as:

(1) Follows

(2) Latch

(3) Timeout

(4) Scheduled

(5) Timeout Re-triggerable

(6) Limit

(7) Counter

Allow for a time schedule to automatically control the activation and de-activation of the Scheduled type with all other types configured to activate based on input and output group conditions.

Additionally, a time schedule must be specified to configure when the output is to actively monitor the input and output groups.

2.3.2.20 Remote Output Control

Provide the operator the capability of manually controlling any output point by issuing a simple command from the operator workstation. Based upon the output type, provide the ESS operator the ability to ENABLE, DISABLE, turn ON and turn OFF any output in this manner. A FOLLOWS type output must not be capable of being turned OFF or ON. Log an entry when this activity is performed displaying the output name and time performed.

2.3.2.21 Remote Reset Command

Provide the capability for any ACU to reset manually or by command issued from the ACS with the option of simulating the ACU reset settings, or forcing a reset type as specified by the user. The remote reset command is not to cause the ACU to degrade its level of protection to any access points defined.

2.3.2.22 Time Zone

Allow the user to select the time zone in which the ACU is located, so that event times displayed for that ACU will match the local time where the ACU is located.

SECTION 28 10 05 Page 16

2.3.2.23 User-Selected LED Behavior

Allow the user to select different behaviors for the LEDs of each access controlled reader.

2.3.2.24 Traced Cards

Provide the capability of selecting any number of cardholders for the purpose of limiting reports to only traced users displaying all traced cardholder events in a user-selected alternate color.

2.3.3 Error and Throughput Rates

Rates must be portal to portal performance averages obtained when processing individuals one at a time. Features are not to reduce capability to meet throughput requirements when serial verification techniques or multiple attempts are required to satisfy error performance requirements.

A Type I error denies access to an authorized enrolled individual. A Type II error grants access to an unauthorized individual. Subsystem Type I and Type II error rates must both be less than 0.1 percent. At the error rates, subsystem access throughput rate must be minimum of 12 individuals per minute through one card reader and keypad access control device.

2.3.4 Access Control System Central Processing

a. Provide serial management and control of system processing. Provide a microprocessor control device able to monitor and control units and up to 32 card reader and keypad access control devices. Central processor must interrogate and receive responses from each ACU within 100 milliseconds. Failure to respond to an interrogation is to cause an alarm.

b. Provide the central processor with an Ethernet interface port to communicate with the printer. Provide an operator interface to control system operating functions. Provide the central processor with a facility-tailorable data base for a minimum of 1000 cardholders with by-name alphanumeric printout, and for automated subsystem monitoring, management, and control functions.

c. Provide enrollment equipment as required in paragraph ENROLLMENT CENTER

EQUIPMENT.

d. Provide system configuration controls and electronic diagnostic aids for subsystem setup and troubleshooting with the central processor.

Components are not to be accessible to operations personnel and must be tamper alarmed.

2.3.5 Access Control Unit/Panel(ACU)

UL 294. Provide micro-processor based ACU with all access and input and output decisions to be made by the individual ACU(s). Provide modular solution which will allow for present security requirements and the capability to expand. Configure all field ACU panels to intercommunicate via RS-422/485 or RS-232 hardwired, TCP/IP or fiber-optic communication.

Equip all field ACU(s) with a tamper contact.

Designate one ACU as "Primary", responsible for all ACS-to-ACU communications. All other ACU(s) up to a maximum of 16 are to be designated as

SECTION 28 10 05 Page 17

"Secondary" and communicate with the "Primary" via an RS-422/485 hardwire, TCP/IP network or fiber-optic configuration. Provide ACU capable of, but not limited to, the following:

a. Built-in surge suppression circuitry on plug-in modular circuit boards with surge suppression, configured as an integral component of the system and self-sacrificing in the event of extreme surges or spikes.

b. Capable of supporting at least 2 ports and be expandable in increments of two ports up to a maximum of 4 ports per ACU.

c. Each port configured by ACS to support any one of the following peripheral devices:

(1) Card reader

(2) Alarm Monitoring Module

(3) Output Relay Module

(4) Elevator Reader

(5) Elevator Output Module

Any device combination can be supported on each ACU, up to a total of 2 devices per ACU.

d. Capability of supporting multiple card reader technologies simultaneously, including:

(1) Contactless Card Reader

(2) Contactless Card Reader with Keypad

(3) Contact/Contactless Card Reader with Keypad

(4) PIV, PIV-I, CAC, CIV (a.k.a., PIV-C), TWIC and FRAC, as well as iCLASS and Mifare

This capability must be an integral part of the ACU and will not require special external equipment.

e. Built-in battery back-up of programmed information sustainable for a period of at least 90 days.

f. Powered by a 12 VDC power source rated at a minimum of 2 amperes with a battery back-up for complete system operation in the event of power failure. Provide battery backup for all ACU(s) to sufficiently power the ACU for 8 hours continuous service.

g. Electric strikes, other locking devices and ancillary peripherals on a separate power supply with battery back-up for continued operation in the event of power failure as specified in paragraph "Backup Power".

h. A minimum of a 10,300 event log buffer per ACU to record and hold access and alarm activity information until the ACS is connected and receives the information. Provide a software-configurable warning log buffer filling notification for ACU(s) configured with network switch capabilities.

SECTION 28 10 05 Page 18

2.3.6 Access Control Devices

UL 294. The card, card reader, and panels must meet FIPS 140-2 and utilize a minimum Advanced Encryption Standard (AES) 128 bit encryption. Devices are to be tamper alarmed, tamper and vandal resistant, and solid state, containing no electronics which could compromise the access control subsystem should the subsystem be attacked.

2.3.6.1 Card Readers

Provide card readers that can read PIV, PIV-I, CAC, CIV (a.k.a., PIV-C), TWIC and FRAC, as well as iCLASS whose characteristics of size and technology meet those defined by ANSI ISO/IEC 7816 in close proximity to the card reader. Use of readers that utilize Card Serial Number (CSN) are not authorized.

Card Readers with keypads must contain an alphanumeric and special symbols keyboard with symbols arranged in ascending ASCII code ordinal sequence.

Provide readers with "flash" upgradable capability to accommodate card format changes, Firmware updates, and the capability of reading the card data and transmitting the data, or a portion thereof, to the ESS control panel and ACS Server.

2.3.6.1.1 Contactless Card Readers with Keypad

Provide HID RK40 card readers with integrated keypads at all exterior doors that are used for routine access into the building(s) with exception to the school's Main Entry. Readers at exterior doors use for routine access shall be capable of being programmed to automatically switch from single factor contactless card read only to requiring two factor Card + individual 4 digit PIN on a specific schedule or upon activation of Police "Lock Out" Alarm, if the site so desires.

2.3.6.1.2 Contact/Contactless Card Readers with Keypad

Provide HID RKCL40 card readers with integrated keypads at the school's Main Entry door and on entry doors to communication closets and server rooms. The readers at the main entry shall be capable of being programmed to automatically switch from single factor contactless card read only to requiring two factor Card + individual 4 digit PIN on a specific schedule or upon activation of Police "Lock Out" Alarm, if the site so desires. The readers at Communications Closets and Server Rooms shall be configured to require two factor, Card + PIN, at all times.

2.3.6.1.3 Contactless Card Readers

Provide HID RK10 or equivalent card readers at all interior doors identified as requiring access control with exception of communication closets and servers rooms. These card readers shall be capable of being configured to read iCLASS cards, the free read FASC-N or CHUID off the CAC card and at all interior doors identified as requiring access control.

2.3.6.1.4 Contactless Card Reader for Network Cabinet Electronic Locks

Provide network cabinet lock(s) (HES KS200 or equivalent) on the ESS equipment cabinets that supports CAC and HID multiCLASS card technologies, is hard powered by 12-24VDC (+/-10%), has cam rotation and tamper monitoring, and supports external door position and/or tamper switch sensor for real-time door status monitoring.

SECTION 28 10 05 Page 19

2.3.6.1.5 Card Reader Display

Provide card readers with an LED or other visual indicator display which indicate power ON and OFF and whether user passage requests have been accepted or rejected.

2.3.6.1.6 Card Reader Response Time

The card reader is to respond to access requests by generating a signal to the local processor.

2.3.6.1.7 Card Reader Power

Power the card reader as prescribed by the manufacturer.

2.3.6.1.8 Card Reader Mounting Method

Provide card readers suitable for surface, semi-flush, pedestal, or weatherproof mounting as required.

2.3.6.1.9 Keypad Duress Codes

Provide a means for users to indicate a duress situation by entering a special code into the card reader keypad.

2.3.6.2 Temporary/Visitor Access Control Cards

Provide [100 Blank HID iCLASS SE] Smart cards with the capability of modification and lamination during enrollment process without readability reduction for use as a picture and identification badge.

2.3.6.2.1 Credential Card Modification

Provide entry control cards that can be modified by [attaching an adhesive backed badge or label] during the enrollment process for use as a picture and identification badge as needed for the site without readability reduction. Credential cards must have or allow adding at least one slot or hole for a clip affixing the credential card to the type badge holder used at the site.

2.3.6.2.2 Card Size and Dimensional Stability

Provide credential cards that are 54 x 85 2.2 mm. The credential card material must be dimensionally stable so that an undamaged card with deformations resulting from normal use is readable by the card reader.

2.3.6.2.3 Card Materials and Physical Characteristics

Provide [clamshell style] credential cards that are abrasion resistant, non-flammable, and present no toxic hazard to humans when used in accordance with manufacturer's instructions. The credential card are to be impervious to solar radiation and the effects of ultra-violet light.

2.3.6.2.4 Card Construction

Provide credential cards of core and laminate or monolithic construction.

2.3.6.2.5 Card Durability and Maintainability

The credential cards must yield a useful lifetime of at least 5 years. The

SECTION 28 10 05 Page 20 credential card must be able to be cleaned by wiping the credential card with a sponge or cloth wet with a soap and water solution.

2.3.6.3 Portal Control Devices

Portal control devices must meet the requirements and specifications in Section 08 71 00 DOOR HARDWARE and this Section. Designers shall coordinate these requirements with Architectural, Civil, Electrical, and Information Technology/Telecommunication Divisions.

2.3.6.3.1 Integrated Electrified Lockset (IEL)

Integrated electrified lockset shall be designed with open architecture platform that is compatible with all major access control systems (ACS) manufacturers and shall be capable of performing a lockdown function when initiated from central ACS. The integrated lock shall include a card reader, door position switch (DPS), latch and dead bolt monitoring, and request-to-exit (REX) signaling switch configuration on the access controlled door. Configure electrified locks to remain secure in case of power failure. The integrated lock shall be equipped with an integrated manual deadbolt with thumb turn on the secure side and manual keyed cylinder on the non-secure side to use with an emergency override only key. The door handle / egress hardware on the secure side shall automatically retract both the electrified latch and deadbolt to allow free egress at all times for life safety. Use of the key override shall retract both the latch and deadbolt to allow entry.

Equivalent examples include but are not limited to: ASSA ABLOY Group, SARGENT SE LP10 or Allegion, Schlage AD Series.

NOTE: IEL door hardware compatibility is limited based on the IEL Manufacturers lock design. Designers shall ensure the hardware is compatible with the lockset proposed.

2.3.6.3.2 Panic Bar

Include panic bar emergency exit hardware on emergency exit doors as required. Provide panic bar compatible with mortise- or rim-mount door hardware and operate by retracting the latch/bolt. Configure panic bars to remain secure in case of power failure.

2.3.6.3.2.1 Normal Egress

Panic bar hardware operation is not to generate an alarm. The panic bar must depend upon a mechanical connection only when exiting.

2.3.6.3.2.2 Signal Switches

Provide an alarm shunt signal from the panic bar emergency exit hardware to the appropriate local processor. Strikes and bolts are to include signal switch indicating to the system when the mechanism is unlocked or dogged down. Provide a recessed UL 634 certified Balanced Door Position Switch (DPS) to monitor the position of the door.

2.3.6.3.2.3 Deadbolt/Dead Latch

Provide thumb turn deadbolt with Emergency Key override and color coded Locked/Unlocked visual position indicator. The indicator may be as simple as the words Locked & Unlocked or a red symbol to indicate unlocked and green symbol to indicate locked, or the word LOCK with an arrow indicating the direction to turn the thumb turn level.

SECTION 28 10 05 Page 21

2.3.6.3.2.4 Delay Egress With Alarm

When specifically require, include a conspicuous warning sign with 25 mm high, red lettering notifying personnel that an alarm will be annunciated if the panic bar is operated.

Delay operation 15 seconds after initiation for portal control devices.

2.3.6.3.3 Electric Door Strikes and Bolts

Configure electric door strikes and bolts to remain secure in case of power failure using DC power to energize the solenoids. Incorporate end-of-line resistors to facilitate line supervision by the system. Install metal-oxide varistors (MOVs) to protect the controller from reverse current surges if not incorporated into the electric strike or local controller.

Electric strikes must have a minimum forcing strength of 101 kN.

2.3.6.3.3.1 Solenoid

The actuating solenoid for the strikes and bolts furnished must not dissipate more than 12 Watts and operate on 12 or 24 VDC. The inrush current must not exceed 1 ampere and the holding current must not be greater than 500 milli-amperes. The actuating solenoid must move from the fully secure to fully open positions in not more than 500 milliseconds.

2.3.6.3.3.2 Signal Switches

Strikes and bolts are to include signal switches indicating to the system when the strike mechanism is unlocked. The signal switches are to report a forced entry to the system.

2.3.6.3.3.3 Tamper Resistance

The electric strike and bolt mechanism is to be encased in hardened guard barriers to deter forced entry.

2.3.6.3.3.4 Size and Weight

Electric strikes and bolts are to be compatible with standard door frame preparations.

2.3.6.3.3.5 Mounting Method

Provide electric strikes and bolts suitable for use with single and double door installations, with mortise- or rim-type hardware as indicated, and compatible with right or left hand mounting.

2.3.6.3.3.6 Astragals

See Section 08 71 00 DOOR HARDWARE for Astragal lock guards.

2.3.6.3.4 Electrified Mortise Lock

Configure electrified mortise locks to remain secure in case of power failure. Provide solenoids rated for continuous duty. Incorporate end-of-line resistors to facilitate line supervision by the system. Install metal-oxide varistors (MOVs) to protect the controller from reverse current surges if not incorporated into the electric strike or local controller.

2.3.6.3.4.1 Solenoid

SECTION 28 10 05 Page 22

The actuating solenoid for the mortise locks furnished must not dissipate more than 12 Watts and operate on 12 or 24 VDC. The inrush current must not exceed 1 ampere and the holding current must not be greater than 500 milli-amperes. The actuating solenoid must move from the fully secure to fully open positions in not more than 500 milliseconds.

2.3.6.3.4.2 Signal Switches

The mortise locks are to include signal switches indicating to the system when the locks/latches are not engaged. The signal switches are to report a valid exit (request to exit), deadbolt position, an unlocked/unsecure status (for example if latch is tapped down), and forced entry to the system when triggered without a valid card read or exit signal.

2.3.6.3.4.3 Hinge

Provide the electrified mortise lock manufacturer's recommended electric transfer hinge with each mortise lock in order to get power and monitoring signals from the lockset to the door frame.

2.3.6.3.4.4 Size and Weight

Electrified mortise locks are to be compatible with standard door preparations.

2.3.6.3.4.5 Mounting Method

Provide electrified mortise locks suitable for use with single and double door installations. The lock would be in the active leaf and the fixed leaf would be monitored in double door installations.

2.3.6.3.4.6 Deadbolt/Dead Latch

Provide 1/4 turn thumb turn deadbolt with Emergency Key override and color coded Locked/Unlocked visual position indicator. The indicator may be as simple as the words Locked & Unlocked or a red symbol to indicate unlocked and green symbol to indicate locked, or the word LOCK with an arrow indicating the direction to turn the thumb turn level. Use of a round spin-to-lock style turning knob is not authorized.

2.3.6.3.5 Electrified Cylindrical Lock

Although not preferred, electrified cylindrical locks may be used on doors that do not require deadbolt for lock down purposes. Configure electrified cylindrical locks to engage the door handle/lever when electrified. The signal switches are to report a valid entry/exit, an unlocked/unsecure status (for example if latch is tapped down), and forced entry when latch is triggered / manipulated without a valid card read or exit signal.

2.3.6.3.6 Electromagnetic Lock

Electromagnetic locks are prohibited.

2.3.6.3.7 Door Position Switches (DPS)

All access controlled doors, unless specified otherwise, and all perimeter Emergency Exit doors shall be equipped with a UL 634 Certified door position switch. Most access controlled school doors are considered general access or low security doors only require the use of a recessed

SECTION 28 10 05 Page 23

3/4" or 1" door position switch such as the Magnasphere MSS-19CL, GE lnterlogix 1076 Series, or equivalent UL 634 Certified door position switch. The recessed Magnasphere MSS-19CL is preferred.

Where possible, the recessed switch shall be mounted at the top of the door per manufacturer's recommendations or mounted just above or integrate with the locking mechanism on the edge of the door as with more modern Integrated Electronic Locksets (IEL). Where use of a recessed switch is not feasible, use of a surface mounted switch at the top of the door is allowed.

Communications closets, server rooms, SIPRNET rooms, and other specifically designated doors shall use UL 634 Level 1 Balanced Magnetic Switches (BMS).

2.3.6.3.8 Vehicle Gate Operator

Provide vehicle gate operators suitable for connection to, monitoring, and control by the system's local processors and include all additional equipment and wiring to be an operable system. Provide a hand crank for the manual vehicle gate operator and a solenoid actuated brake operation to prevent gate coasting.

Provide an auto reverse time delay of at least 1 second and not more than 3 seconds to minimize shock loads on vehicle gate operator drive components.

Include a contactor type motor starter that is appropriate for the gate operator motor.

2.3.6.3.8.1 Input Power

Provide vehicle gate operator that operates from the voltage source as shown on the drawings. Include manual reset type thermal and electrical overload devices.

2.3.6.3.8.2 Audible Warning

Provide an audible warning system to signal personnel in the vicinity of the vehicle gate operator that an opening or closing is about to commence.

The audible warning must sound at least 2 seconds and no more than 5 seconds before movement begins.

2.3.6.3.8.3 Maximum Run Timer

The vehicle gate operator must incorporate an internal maximum run timer which limits the motor run time. The maximum run time is to be operator adjustable for at least the maximum amount of time gate opening or closing takes during normal operation.

2.3.6.3.8.4 Adjustable Load Monitor for Obstruction Sensing

Provide operator adjustable load monitor that senses obstructions in the path of the gate and automatically reverses the vehicle gate operator drive motor. Do not allow the gate to open once the gate has reached the limit switch.

2.3.6.3.8.5 Operator Override Controls

Provide the vehicle gate operator with an interface to a three pushbutton control station located within an entry controlled area. The three pushbutton switches are to be labeled and function as Open, Close, and Stop controls, and meet the requirements of paragraph Pushbutton Switches.

2.3.6.3.8.6 Limit Switches

SECTION 28 10 05 Page 24

Provide adjustable limit switches to define the range of gate travel and provide a means to securely lock the switches in place after adjustment.

2.3.6.3.8.7 Type of Gate

Provide the vehicle gate operators to be compatible with cantilever, roller, v-track, overhead, slide, and swing gates.

2.3.6.3.8.8 Safety

Provide safety compatible with paragraph "Type of Gate" for entrapment protection.

2.4 CLOSED-CIRCUIT TELEVISION (CCTV) SYSTEM

2.4.1 Cameras

2.4.1.1 CCTV Camera

Provide cameras of digital fixed, pan-tilt-zoom (PTZ), or panoramic type as identified on the drawings.

a. Day-Night Color fixed, PTZ or panoramic cameras are to be used in all outdoor environments. Standard fixed, PTZ, or panoramic cameras are to be used for all indoor applications except when backlighting issues are observed. Use Day-Night cameras or standard cameras with backlighting compensation for backlighting or high contrast applications.

b. Provide PTZ cameras with a direct drive motor assembly. Belt driven

PTZ camera units are not acceptable.