Attachment 1-SOW CAC Locks.pdf

STATEMENT OF WORK

ACCESS CONTROL SYSTEM AT B127 AT

JBSA – LACKLAND TRAINING ANNEX, TEXAS

29 April 2020

1. Introduction. The Special Warfare Training Wing located at Chapman Training Annex JBSA-

Lackland, TX has identified access control to building 127 located at 1044 Apollo Dr. Chapman

Training Annex is not fully operational and the original contractor who provided the current system is no longer supporting that outdated system. In order to increase safety, enhance security and maximize accountability of military personnel while reducing the possibility of interference or unwarranted access, a new system is needed. An Access Control System, capable of reading

Department of Defense (DoD) Common Access Cards (CAC), are currently being utilized at

Randolph AFB and Fort Sam Houston within Joint Base San Antonio (JBSA), while individual autonomous locks are used all across JBSA to secure interior rooms from unwanted access.

2. Scope of Work. Contractor shall provide all personnel, equipment, tools, materials, and supervision necessary to remove existing locks and install:

The exterior Proximity Access Control Systems, capable of reading DOD CAC throughout building 127 at JBSA – Chapman Training Annex. Building is a three-story facility which will need 5 exterior doors (all on the first floor) and 234 interior doors to be protected by CAC-enabled proximity security system.

Lock replacement must not compromise the integrity of the door fire rating and all holes as result of removal of existing locks shall be covered by the new Access Control

System.

All work shall be accomplished in accordance with product manufacturer’s recommendations, industry standards and shall meet all State, Federal and local codes and guidelines. The Access Control System shall be a turnkey installation upon completion. A layout with a location of the locks can be found in Attachment 1.

3. Specifications and Applicable Characteristics of the Access Control System. Mortise lock and

Panic Hardware shall meet or exceed the American National Standards ANSI A156.13, Series

1000, Grade 1 Operational and Grade 2 Security.

3.1. General Requirements:

3.1.1. Locking and keying hardware provided by contractor for this Physical Access Control

System (PACS) and rekey project shall be of same manufacturer that meets the Governments minimum need.

3.1.2. The Card Reader System shall allow for Smart Card access by utilizing (1) reader capable of reading existing DOD Common Access Card (CAC).

3.1.3. Power supply/battery packs of locksets shall utilize non-proprietary battery packs.

3.1.4. All locking hardware shall have small format interchangeable core Key Override function.

3.1.5. System shall include a minimum of 12 head-end server/software systems to support card reader locks at designated building.

3.1.6. 502 Communication Squadron has approved the contractor to provide an independent network to run the system will not interfere with other government networks.

3.2. Card Access System Requirements:

3.2.1 Components: Furnish an electronic card access lock system, complete and including without limitation, the following components:

Complete programming, data storage and software.

Server PC and hardware to support System Administrator requirements at each Head-end location.

Card reader/lock units – As Detailed Below

Proximity Cards (as provided by Lackland AFB per DOD CAC)

Proximity Encoder System

Special tools (as required)

Operating manuals.

On-site training of staff.

1,000 Token Cards coded sequentially to have audit trail of use.

3.3. Card Access Electronic Locking System:

Dynamic memory up to 8,000 credentials per reader

Each reader has its own unique MAC address

Battery-powered by ‘AA’ battery case

All intelligence is at the door, NOT at a controller

Standard Integrated Door Switch (DS), Latch Switch (LS), Request-to-Exit

(RQE) and Key Override Sensor (KOS) on mortise chassis.

Standard Integrated DS, LS, RQE on EX chassis with the panic exit device line.

Approximately 7.9K-Event audit trail stored dynamically at reader

512 time zone user groups per reader with 6 intervals each

ADA compliant locksets

User feedback indicators: Audible and visible.

Operating temperature (Exterior side of door): -35°C to +66°C (-31°F to

+150°F).

Read rate: 2 to 60 inches per second.

The proximity/smart chip reader is to be vandal resistant.

Proximity Enrollment Reader to be provided by contractor with software

All new Wi-Q readers shall have a minimum 130,000 cycle / 2 to 5 year battery life

3.3.1 Software: The Contractor shall insure that all new Wi-Q locksets installed will be compatible with the following:

Communicates at 2.4GHz spread spectrum to wireless readers or wireless access controllers

Uses 802.15.4 protocol with clear channels above 802.11 to allow Wi-Fi interoperability.

10/100/1000 Base-T bit Ethernet

Provides redundant communication (locks attached to the strongest signal)*The software shall allow for batch updating of data. A universal interface server shall be provided to integrate other databases if the owner requests.

3.4. Card Reader

A. Specifications

The reader shall support 2,000 unique ID’s in its standard configuration and be expandable to 20,000. Expansion shall not require a field upgrade at the reader but rather a software key shall be downloaded from the host that shall increase the database size and support up to 20,000 cardholders. The reader shall support up to 99,000 transactions in the event the lock cannot communicate to the portal gateway.

Up to 512 time zones shall be supported. Time zones shall be able to cross midnight such that a shift beginning at 10:00 PM and ending at 9:00 AM the next morning, will be considered as a single time zone. A unique set of access privileges shall be available for each cardholder per reader/lock.

3.5 Software

A. Specifications

Communicates at 2.4GHz spread spectrum to wireless readers or wireless access controllers

Uses 802.15.4 protocol with clear channels above 802.11 to allow Wi-Fi interoperability.

10/100/1000 Base-T bit Ethernet

Provides redundant communication (locks attached to the strongest signal)*The software shall allow for batch updating of data. A universal interface server shall be provided to integrate other databases if the owner requests.

Non-dedicated portal can communicate with 1 to 64 readers

Does not require typical controller hardwiring, simply plug the Portal Gateway into an existing TCP/IP network and provide local power.

The software shall be capable of networking multiple segment locations to a single database.

Software will have to be approved by JBSA Software Management Office before acquisition and installation. Software needs to comply with the memorandum reflected as Attachment 2.

3.6 Keying System

Each barrel of core shall be independently capped.

Patented Core and locksets shall be of the same manufacturer or equal.

All cores shall be 7-pin, interchangeable core. Shall be keyed into a new factory registered Grand Master Key System.

Key tier scheme shall be provided by customer.

Permanent keys and cores shall be stamped with the applicable key mark for identification. These visual key control marks or codes will not include the actual key cuts.

All keys and other Security Keys shall be transmitted to the Owner by U.P.S., delivery confirmation requested.

All orders for keys or cores shall have email verification from registered key custodian before order is processed.

4. Specific Task.

4.1 The contractor shall remove existing locks and obsolete wiring and install the Access Control

Systems in building 127. Building is located at JBSA - Lackland Training Annex. Contractor shall provide all equipment necessary to remove existing locks and obsolete wiring and install the

Access Control Systems throughout the building. Contractor is responsible for cleanup and removal of all trash and debris from building on a daily basis throughout all phases of work.

4.2 Contractor will provide all cabling, POE, terminations, and testing to create an entirely new internal network that ties the software to the portal gateways.

5. Hours of Work. Normal hours of work are 7:30 AM to 4:15 PM from Monday to Friday except on government Holidays. Mr. Michael Davenport, SWTSS/TRR, 210-845-8133 is primary and

502 CES Base Locksmith, 210-671-5555 is the alternate point of contact for this work requirement and is required to be notified 72 hours prior to start of work. Contractor will be required to coordinate all work at each facility each day by contacting Mr. Michael Davenport, SWTSS/TRR, 210-845-8133.

6. Safety and Security.

6.1 The contractor shall ensure compliance with OSHA Safety and Health Regulations at all times.

Prior to daily end of work, the contractor shall properly secure the work site and locate and secure tools, equipment, and materials as necessary to ensure the safety and protection of personnel, equipment and property. Contractor will be responsible to ensure buildings and rooms are secured at the end of each day.

6.2 System shall have the capability to be controlled by each building manager so that if a card is lost or stolen the building manager has the capability to add or delete CAC access. Contractor shall provide any upgrades to system during warranty work that will improve system operation.

7. Training. The contractor shall provide training for the primary and alternate building managers.

The classes shall include a combination of on-the-job (OTJ) and classroom structured training.

The contractor shall identify the estimated duration for the proposed training. Applicable training material (both a hard copy and a soft copy) shall be provided to each manager at the time of the training. The training shall provide the managers with the knowledge required for Operations, Administration, Maintenance, and Provisioning (OAM&P) duties for the system (all equipment installed) as a complete system. The training shall be conducted at JBSA – Lackland Training

Annex in building 127.

8. Warranty/Maintenance. The contractor shall warrant the system (all hardware and software) and work performed for a period of 3 year warranty on parts, with 1 year warranty on labor after

Government acceptance of the installation.

9. Government Furnished Equipment (GFE). The government will not provide fiber for building.

10. Contractor will provide fiber, installation, networking, and termination within building to allow for Black Network Stand Alone control of Access Control System.

Note: Contractor penetrating any fire rated walls shall make all patch repairs to comply with applicable fire codes.

ATTACHMENT 1

ATTACHMENT 2