Attachment_02_IPMS_IPD_PSPEC.pdf

Attachment 02

PERFORMANCE SPECIFICATION

FOR THE

INTELLIGENT POWER MANAGEMENT SYSTEM

INTELLIGENT POWER DISTRUBUTION

31 May 2018

Marine Corps Systems Command 2200 Lester Street

Quantico, VA 22134-6050

This Page Intentionally Left Blank.

CONTENTS

1.0 SCOPE 1

2.0 APPLICABLE DOCUMENTS 1

2.1 Government Documents 1

2.1.1 Specifications, Standards, and Handbooks 1

2.1.2 Other Government Documents, Drawings, and Publications 2

2.2 Non-Government Documents 2

2.3 Order of Precedence 2

3.0 REQUIREMENTS 3

3.1 Design 3

3.1.1 Load Balancing 3

3.1.2 Load Prioritization and Shedding 3

3.1.3 Load Shed Event Triggering 3

3.1.4 Demand Limiting 3

3.1.5 Energy Limiting 4

3.1.6 Manual Mode 4

3.1.7 Control Electronics Energy Storage 4

3.1.8 Control Electronics Line Replaceable Unit 4

3.1.9 Metering and Monitoring 4

3.1.10 Metering and Monitoring (Hardware Interface) 5

3.1.11 Metering and Monitoring (Data Interface) 5

3.1.12 Metering and Monitoring (Sample Rate, Resolution, and Range) 6

3.1.13 Metering and Monitoring (IPD Panel Display) 6

3.1.14 Metering and Monitoring (Human/Machine Interface) 7

3.1.15 Metering and Monitoring (Timekeeping) 8

3.1.16 Metering and Monitoring (Data Logging and Retrieval) 8

3.1.17 Cybersecurity (Cryptographic Identities) 9

3.1.18 Cybersecurity (Cryptographic Algorithms) 9

3.1.19 Cybersecurity (Communications Content and Protocols) 9

3.1.20 Cybersecurity (Network Security) 10

3.1.21 Cybersecurity (Access Controls) 10

3.1.22 Cybersecurity (Firmware Upgrades) 10

3.1.23 Compatibility 11

3.1.24 Backward Compatibility 11

3.1.25 Service Life 11

3.1.26 Wear Out Life 11

3.1.27 Human Factors 11

3.1.28 System Safety and Environmental Protection 11

3.1.29 Electrical Safety (Personnel and Equipment) 12

3.1.30 Electrical Safety (Bonding and Grounding) 12

3.1.31 Electrical Safety (Safety Interlocks) 12

3.1.32 Electrical Safety (Emergency Stop) 12

3.1.33 Electrical Safety (Failsafe Mode) 12

3.1.34 Labels 13

3.1.35 Data Plates 13

3.1.36 Electromagnetic Interference 13

3.1.37 Nuclear, Biological, and Chemical Decontamination 13

3.1.38 Materials (Electrical) 13

3.1.39 Materials (Fungus) 13

3.1.40 Materials (Flame) 13

3.1.41 Materials (Colors) 14

3.1.42 Unique Identification 14

3.1.43 Personnel and Tools 14

3.1.44 Setup and Teardown 14

3.1.45 Environmental (Operational Temperature) 14

3.1.46 Environmental (Storage Temperature) 14

3.1.47 Environmental (Transit Drop) 15

3.1.48 Environmental (Sand) 15

3.1.49 Environmental (Dust) 15

3.1.50 Environmental (Rain Intrusion) 15

3.1.51 Environmental (Humidity) 15

3.1.52 Environmental (Salt Fog) 15

3.1.53 Environmental (Corrosion) 15

3.1.54 Environmental (Terrain) 16

3.1.55 Manpower 16

3.1.56 Maintenance (Preventive) 16

3.1.57 Maintenance (Corrective) 16

3.1.58 Maintenance (Storage) 16

3.1.59 Operational Availability 16

3.1.60 Configuration (200Amps Power Panel) 16

3.1.61 Configuration (800Amps Power Panel) 17

3.1.62 Configuration (1200Amps Power Panel) 18

3.1.63 Transportability 18

3.1.64 Silent Watch 19

4.0 VERIFICATION 19

5.0 PACKAGING 19

6.0 NOTES 20

6.1 Summary 20

6.2 System Overview 20

6.3 Concept of Employment 20

6.4 Threshold versus Objective Requirements 21

1.0 SCOPE

The Program Manager (PM) Engineer Systems is developing an Intelligent Power Distribution (IPD) system with associated metering and monitoring, as part of a larger Intelligent Power Management System (IPMS). Other facets of the IPMS include a microgrid product improvement effort to current Advanced Medium Mobile Power Systems (AMMPS) and energy storage units (ESU). This document only addresses the IPD component of the IPMS.

2.0 APPLICABLE DOCUMENTS

The documents listed in this section are specified in sections 3, 4, and 5 of this specification.

This section does not include documents cited in other sections of this specification or recommended for additional information or as examples.

2.1 Government Documents

2.1.1 Specifications, Standards, and Handbooks

The following specifications, standards, and handbooks form a part of this document to the extent specified herein. Unless otherwise specified, the issues of these documents are those cited in the solicitation or contract.

Table 2-1 Government Specifications, Standards, and Handbooks DEPARTMENT OF DEFENSE MILITARY STANDARDS – Mandatory

MIL-STD-129R Military Marking for Shipment and Storage, 18 February 2014

MIL-STD-130M Identification Marking of U.S. Military Property, 02 December 2005

MIL-STD-461G Requirements for the Control of Electromagnetic Interference Characteristics of Subsystems and Equipment, 11 December 2015

MIL-STD-464C Electromagnetic Environmental Effects Requirements for Systems, 01 December

MIL-STD-810G Test Method Standard, Environmental Engineering Considerations and Laboratory Tests, 31 October 2008

MIL-STD-882E System Safety, 11 May 2012

MIL-STD-889C Dissimilar Metals, 22 August 2016

MIL-STD-1366E Interface Standard for Transportability Criteria, 18 December 2006

MIL-STD-1472G Human Engineering, 11 January 2012

MIL-STD-1474E Noise Limits, 15 April 2015

MIL‐STD‐1791C Designing for Internal Aerial Delivery in Fixed Wing Aircraft, 23 October 2017

MIL-STD-7179 Finishes, Coatings, and Sealants, for the Protection of Aerospace Weapons Systems, 30 September 1997

DEPARTMENT OF DEFENSE MILITARY HANDBOOKS – Guidance

MIL-HDBK-419A Grounding, Bonding and Shielding for Electronic Equipments and Facilities Applications, 29 December 1987

MIL-HDBK-454B General Guidelines for Electronic Equipment, 15 April 2007

MIL-HDBK-729 Corrosion and Corrosion Prevention, 21 November 1983

(Copies of these documents are available online at http://assist.daps.dla.mil/quicksearch/ or http:/www.dodssp.daps.mil or from the Standards Document Order Desk, 700 Robins Avenue, Building 4/D, Philadelphia, PA 19111-5094.)

2.1.2 Other Government Documents, Drawings, and Publications

The following other Government documents, drawings, and publications form a part of this document to the extent specified herein. Unless otherwise specified, the issues of these documents are those cited in the solicitation or contract.

Table 2-2 Other Government Documents, Drawings, and Publications Directives/Instructions – Mandatory Compliance

DoDI 8510.01 Risk Management Framework (RMF) for DOD Information Technology (IT), Change 2 28 July 2017

DoDI 8320.04 Item Unique Identification (IUID) Standards for Tangible Personal Property

FED-STD 595C Colors Used In Government Procurement, 16 January 2008

FM 3-11.5/MCWP 3-37.3 CBRN Decontamination Multiservice Tactics, Techniques, and Procedures for Chemical, Biological, Radiological, and Nuclear Decontamination, April

2.2 Non-Government Documents

The following documents form a part of this specification to the extent specified herein. Unless otherwise specified, the issues of these documents are those cited in the solicitation or contract.

Table 2-3 Non-Government Documents American National Standards Institute (ANSI)

ANSI Z535.4 Product Safety Signs and Labels, November 2011 International Electrotechnical Commission (IEC)

IEC 60309 Plugs, Socket-Outlets and Couplers for Industrial Purposes, 2012

National Fire Protection Association (NFPA)

NFPA 70 NEC National Electric Code, 2017 edition Underwriters Laboratories (UL)

UL 969 Compliance Guidelines for Marking and Labeling Systems, 2016

2.3 Order of Precedence

In the event of a conflict between the text of this document and the references cited herein (except for related specification sheets) the text of this document takes precedence. Nothing in this document, however, supersedes applicable laws and regulations unless a specific exemption has been obtained.

http://assist.daps.dla.mil/quicksearch/ http://www.dodssp.daps.mil/ http://www.dodssp.daps.mil/ http://www.dodssp.daps.mil/

3.0 REQUIREMENTS

Note: Requirements in this specification that are "shall" are contractually binding requirements and verifiable. Statements in this specification that are "will" are agreements and are non-verifiable.

3.1 Design

3.1.1 Load Balancing

Load balancing will be accomplished through more efficient camp planning utilizing AutoDISE planning software and not hardware/software associated with IPD. Therefore, there are no IPD load balancing performance specifications.

3.1.2 Load Prioritization and Shedding

The IPD shall provide a user programmable interface that assigns priority levels to power distribution branch circuits. This capability shall allow the automated shutdown of lower priority supported devices and structures and continued distribution to higher priorities (T=O).

Verification will be by demonstration.

3.1.2.1 Load Prioritization

It is required that the system outputs shall be programmable for Priorities 1-5, Priority 1 (ex.

Critical, Force Protection) being highest priority and Priority 5 (ex. Ancillary, Exchange Services) the lowest. The default Priority for each output port shall be Priority 1 (Critical).

Default settings shall be adjusted by a user-initiated event (T=O).

When load demand exceeds total available input power, loads shall be automatically shed (power removed) starting with Priority 5 loads followed by Priority 4 loads, then 3, then 2. Priority 1 loads are considered critical and shall be kept powered at all times (T=O).

3.1.2.2 Re-energizing Load

The IPD shall not re-energize shed loads automatically. Manual re-energizing shall be required.

This does not require the IPD to trip all circuits when shutting down or losing power.

Load prioritization, automated shedding, and re-energizing requirements will be verified by demonstration of the capability to accept input power, distribute to users, and shutdown power to lower priority users in compliance with pre-programmed priorities.

3.1.3 Load Shed Event Triggering

The IPD shall include the function to select the load shedding to trigger based on: 1. Power; 2.

Current; 3. Under voltage; 4. Under frequency; 5 Manual. These shall include user settable thresholds and durations. The IPD shall include user selectable settings to shed all loads at the same priority at once or shed load from highest load to lowest at a given priority until the load shed trigger event is no longer present. Setting the trigger mode to Manual shall allow an external controller to assert a command to open an output port (T=O). This requirement will be verified by analysis of vendor design.

3.1.4 Demand Limiting

The IPD shall have the ability to apply demand limits to individual ports of the IPD. The IPD shall include a user selectable per-port setting to limit the power available based on 1. Power; 2.

Frequency; 3. Current. These shall include user settable thresholds, durations, and power rate limits, as well as a disable this function on a per-port and per-IPD basis (default) (T=O). This requirement will be verified by analysis of vendor design.

3.1.5 Energy Limiting

The IPD shall have the ability to apply energy limits to individual ports of the IPD. A selected port shall have the capability to be credited an initial energy balance, where power usage deducts from this balance, and the disconnect threshold is reached when the balance reaches zero. The port shall be able to accept periodic energy credits, up to a fixed limit (O). This requirement will be verified by analysis of vendor design.

3.1.6 Manual Mode

IPD shall have a user-selectable manual mode in which all load shedding and demand/energy limiting shall be disabled. In manual mode, a user shall have the ability to energize or de-energize any output port without software or firmware intervention, via hardware controls (ex.

Toggle switch or push-on push-off button, shunt trip circuit breaker). Each output port shall have a dedicated set of hardware controls (T=O). Verification will be by demonstration.

3.1.7 Control Electronics Energy Storage

The IPD shall include enough energy storage so that the control electronics can write configuration and state to non-volatile memory as well as to hold the outputs in the existing state (i.e. open or closed) for a minimum of two (2) minutes of incoming power loss (T); twenty (20) minutes (O). The IPD shall retain its last state until the minimum times have elapsed or until power returns. After this time, the IPD shall restart to its power on state when power is applied again. Verification will be by demonstration.

3.1.8 Control Electronics Line Replaceable Unit

The IPD shall be designed to include a controller assembly that is installed to a side panel of the unit. The assembly shall be installed in such a way that the assembly can be changed out by Military Occupational Specialty (MOS) 1141 and MOS 1142 Marines in the field, and replaced with an upgraded version that will be compatible with the existing IPD hardware. The design shall include an environmentally sealed enclosure with connectors designed to be easily replaced, inward facing connectors for controller to IPD connections, and front panel mounted controllers for external communications. The manufacturer shall include an open, non-proprietary interface specification, fully documenting all signals on all ports. The assembly shall include all supervisory control, as well as data acquisition and storage. Networking, network security, and other communication components shall be included in this assembly (O).

Verification will be by demonstration and vendor design analysis.

3.1.9 Metering and Monitoring

The IPD shall interface with local device/local network to provide real-time metering and monitoring (T) and interface with external network (O) for remote metering and monitoring.

Local device refers to display panels on individual IPDs and associated AMMPS and ESUs that are part of an IPMS system. Local network refers to Ethernet wired IPDs and associated AMMPS, ESUs, and metering/monitoring computers or tablets. External network refers to networks external to the local network, including the Global Information Grid, regardless of whether the connection is wired or wireless.

Local device metering and monitoring on individual IPD panels shall be provided by displays that inform the operator/maintainer of panel voltage, current, breaker status, and power levels for each power output.

Local and external network metering and monitoring shall be in real time and be compatible with existing secure network systems. Operator/maintainers will be informed of voltage, current, breaker status, and power levels for each power input on each IPD panel. Verification will be by demonstration.

Existing networks and protocols will be used. Verification will be by analysis of vendor design data.

3.1.10 Metering and Monitoring (Hardware Interface)

IPD panels shall allow communication of data amongst panels, from panels to AMMPS generators, from panels to customer loads, and from panels via 250 ft Ethernet cable to laptop computer, as necessary to provide metering/monitoring capability. The connector shall be RJ45 Ethernet enclosed in an IP67 or IP68 housing and have a cover for when the cable is not connected to the panel.

The data cable shall be shielded twisted pair (STP, SSTP, or SFTP), Cat 6 shielded or better. The data cable shall be flexible (stranded conductors) and designed for use in harsh environments, outdoor (CMX) rated, with oil- and UV-resistant jacket and mating connectors for the IP67/IP68 housing. The data cable shall have internal water proofing, such as a gel-filled core or waterproof tape (T=O).

IPD panels shall contain an Ethernet switch internally with sufficient port density to support the following requirements:

• There shall be at least one (1) external Ethernet port per power input and output port in order to connect IPDs into a network for power monitoring and remote functionality.

• There shall be at least one (1) external Ethernet port on the IPD for local configuration, monitoring and data log retrieval.

• There shall be at least one (1) internal Ethernet port for the IPD controller to connect.

• There shall be at least two (2) additional Ethernet ports on the switch for future functionality.

• The Ethernet switch internal to the IPD shall be replaceable in a standalone fashion.

Switch replacement shall be independent of control electronics assembly upgrades.

Ethernet switches shall comply with ITU G.8032 Ethernet ring protection switching.

Verification will be by analysis of vendor design data.

The power cable shall use three conductors of 12 AWG and be UL/CSA SOOW rated. The power cable shall have one female and one male IEC 309 connector with attached dust covers (T=O). Verification will be by inspection.

3.1.11 Metering and Monitoring (Data Interface)

Data communication shall use Modbus TCP, CAN bus (with PCAN Ethernet Gateway), or another protocol approved by the Government. The Ethernet interface shall have a data rate of 10/100 Mbps or 10/100/1000 Mbps (T=O).

The IPD shall provide power measurement data on all three phase output ports (T). The IPD shall provide power measurement data on all input and output ports (O). Following are minimum set of data the measurements shall provide.

Table 3-1 IPD Measurements

Per-Phase Measurement Port Measurements

True RMS Current and Voltage (Line to Neutral) True RMS Voltage (Line to Line (A-B, B-C, C-A)

Real Power Total Real Power

Reactive Power Total Reactive Power

Apparent Power Total Apparent Power

Power Factor or Power Factor Angle Line Frequency

Average RMS Current

The panel shall broadcast periodic discovery messages whenever it is connected to a network (O).

Software and firmware shall be designed IAW DODI 8510.01 to support platform information technology cybersecurity (T=O). Verification will be by analysis of vendor software/firmware design.

3.1.12 Metering and Monitoring (Sample Rate, Resolution, and Range) Update rate for all measurements shall be 1 second (T) and 0.1 second (O) at both the local human/machine interface (HMI) and over remote monitoring interface. Following are measurement ranges and resolutions (T). Verification will be by analysis of vendor software/firmware design.

Table 3-2 Measurement Ranges

Threshold Resolution Threshold Range Objective

Resolution Objective Range

RMS Voltage 1 V [0, 130]% 0.1 V [0, 140]% RMS Current 1 A [0, 150] % of rated 0.1A [0, 200] % of rated

Power 10 W [0, 150] % of rated 1 W [0, 200] % of rated Frequency 0.1 Hz [-8, 8] % of rated .01 Hz [-8, 8] % of rated

Power Factor .01 [-1,1] .005 [-1,1]

3.1.13 Metering and Monitoring (IPD Panel Display)

Each port shall include a lamp which illuminates when voltage is present at the connector. Each IPD shall have a visual alarm which illuminates when a breaker is in the tripped state. Following are parameters that shall be available on the IPD to the user. Verification will be by demonstration.

Table 3-3 IPD Panel Display Information Panel Display Information Per Port Panel Display Information Per Panel

Per phase RMS Current Frequency Per phase RMS Voltage (L-N) Manual/Automatic setting

Average RMS Current Load shed control mode Real, Reactive, and Apparent Power Load shed configuration

RMS Voltage (L-L) Communication Status Breaker Status IPD temperature

Load Shed Events (current status and last load shed) IPD faults and warnings Port Priority Serial number or other unique ID

Demand Limiting configuration MAC address

3.1.14 Metering and Monitoring (Human/Machine Interface)

The HMI shall include read and write access to the digital controls listed in the following table.

If menus for items such as network configuration or firmware updates are included, they shall be restricted or unlockable. However, the HMI shall not include hidden or undocumented screens or menus.

Table 3-4 IPD Digital Controls for the IPD Digital Controls Per Port Digital Controls Per IPD Panel

Port Priority Load shed control mode Demand Limiting configuration Load shed configuration Communication Settings Data logging settings Date and time Reset to default settings

The IPD shall allow read access to all parameters in Table 3-3 and all parameters in Table 3-4.

When the IPD is in automatic mode, parameters listed in Table 3-4 shall be available with write access via communication port.

All HMI actions and users shall be authenticated with a Common Access Card (CAC). This requirement does NOT imply more than simple CAC-based authentication for the purpose of tracking which actor have taken which actions within the system. It does NOT require full PKI support nor user accounts; simply that CAC authentication is required to observe system state or implement a system action. The CAC simply allows access to the HMI, but does not guarantee privileged access as specified in Cybersecurity (Access Controls).

All HMI actions shall be logged in the control action log for the IPD, except for the act of navigating through HMI menus. The cryptographic identity of the actor performing an HMI action shall be cryptographically bound to each corresponding log record, i.e., a cryptographic signature over the operational record shall be generated by the actor of the operation and shall exist within the log record. Verification will be by analysis of vendor design data.

3.1.15 Metering and Monitoring (Timekeeping)

IPDs shall synchronize time with all Ethernet-networked microgrid devices according to Network Time Protocol Version 4 defined by RFC 5905 and its extensions defined by RFC 7822 and 5906. Verification will be by analysis of vendor design data.

3.1.16 Metering and Monitoring (Data Logging and Retrieval)

The IPD shall include a means to log and store locally in non-volatile storage the following:

• Operation data – see Table 3-5;

• Control actions - these are control actions initiated through the HMI, over the network, or via any other mechanism;

• System actions - these include firmware updates, changes to access control and file permissions, access to maintenance diagnostics.

Logged control and system actions shall be stored separately from operation data and formatted according to RFC 5424 Syslog with cryptographic protections applied according to RFC 5848.

IPD logging software shall cryptographically sign operation log files every 4 hours.

The IPD shall have the storage capacity for a minimum of seven (7) days (T) or 30 days (O) logging at a nominal update rate of 30 seconds (T) for operation data. The IPD shall have user selectable logging rates operation data (O). Operation data logs shall be retrievable via network interface (T) or via network and local interface (O). Control and system logs shall be aggregated securely according to RFC 5424 and RFC 5425. IPDs shall centrally aggregate logs in real-time as log records are generated.

Log data shall be timestamped using a microgrid-synchronized timestamp. Metering and Monitoring (Timekeeping) section defines the synchronization protocol.

The default operational data to be logged are listed in the following table.

Table 3-5 Default Data for Logging Default Logging Data Per Port Default Logging Data Per IPD Panel

Port real power Date and Time of sample Phase A current Average L-N voltage Phase B current Line Frequency Phase C current Total real power Status of output port (i.e. breaker or load shed status)* Total reactive power Total apparent power Load shedding events *Output port status may be reported across the IPD to reduce data storage requirement or number of data fields to store.

The retrieved data logs shall be in a documented format or vendor shall provide translation tools to export data to use in third party software (i.e. MS Excel) (T), formatted according to the Syslog protocol defined in RFC 5424 (O). No internet connection shall be required for use of data retrieval or data export.

The IPD data log system shall include a means to select additional logging parameters (O).

Verification will be by analysis of vendor design data.

3.1.17 Cybersecurity (Cryptographic Identities)

The IPD and associated actors shall possess a cryptographic identity used to identify itself digitally. The identity shall take the form of a public-private key pair. Each actor shall also possess a public-private key pair used to cryptographically sign data and a third used to cryptographically encrypt data. “Actors” include IPDs, users, IPMS/microgrid controllers, and any other digitally networked device (T=O). Verification will be by analysis of vendor design data.

3.1.18 Cybersecurity (Cryptographic Algorithms)

The IPD shall utilize cryptographic algorithms in accordance with National Security Agency Suite B guidelines where algorithms are required to implement cryptographic identities, secure communications, and any other cryptographic element defined by this specification. These guidelines serve as a cryptographic base for military data processing. The components of Suite B are the following:

• Advanced Encryption Standard (AES) with key sizes of 128 and 256 bits – used for symmetric encryption;

• Elliptic Curve Digital Signature Algorithm (ECDSA) – used for digital signatures;

• Elliptic Curve Diffie-Hellman (ECDH) – used for key agreement; and

• Secure Hash Algorithm 2 (SHA) – used for message digest Only those algorithms required to meet this IPD specification shall be implemented.

Network communications shall be protected using mutually authenticated Transport Layer Security (TLS) and mutually authenticated Datagram TLS (DTLS) for User Datagram Protocol (UDP) communications (T=O). These requirements will be verified by vendor design analysis.

3.1.19 Cybersecurity (Communications Content and Protocols)

The IPD shall implement IPv6 and shall implement Stateless Address Autoconfiguration (SLAAC). The IPD shall implement RFC 6762 Multicast DNS (mDNS) and by default, its hostname shall be its unique identifier (following DNS naming rules defined in RFC 1035 Domain Names – Implementation and Specification) unless otherwise configured by an operator.

The IPD shall allow read access to all metering information presented in Table 3-3 and all control parameters in Table 3-4 via a Modbus connection (T) or according to the Tactical Microgrid Standard (TMS) via the Data Distribution Service (DDS) protocol (O). When the IPD is in automatic mode, parameters listed in Table 3-4 shall be available with write access via the communication port.

All control actions taken within the system shall be cryptographically signed by the actor initiating the action and logged by the system implementing the action according to the logging requirements defined in Data Logging and Retrieval section.

The IPD shall communicate using the following TMS messages, or if using Modbus, messages carrying equivalent information: ProductInfo, ActiveDiagnosticMessages, PowerSwitchCommand, DevicePowerPortStatuses, DevicePowerMeasurements, StandardConfigMaster, and DistributionLoadPolicy. Verification will be by analysis of vendor design data.

3.1.20 Cybersecurity (Network Security)

Network communications shall be protected using mutually authenticated Transport Layer Security (TLS) and mutually authenticated Datagram TLS (DTLS) for UDP communications.

TLS is defined by RFC 5246 and DTLS by RFC 6347. Both modes shall implement TLS session hash and extended master secret extension, defined by RFC 7627.

Devices shall authenticate to the network using IEEE 802.1X Port-Based Network Access Control (PBNAC). Devices shall block all incoming and outgoing network traffic except for those ports and protocols required to control and monitor the microgrid. Devices that support network-based login access shall implement public key-based secure shell (ssh) (e.g., using the public/private keypair on the operators CAC) and not support password-based network access nor permit a remote root login (T=O). These requirements will be verified by vendor design analysis.

3.1.21 Cybersecurity (Access Controls)

Any CAC shall provide access to operate IPDs and the microgrid. User roles shall be defined to differentiate between privileged and non-privileged access. Configuration of IPMS shall require privileged access and their operations shall require non-privileged access. Privileged access shall grant a user the ability to update firmware, configure user access privileges, adjust load priorities and load shedding criteria, and open and close contactors from any remote or electronic interface. Non-privileged access shall grant a user the ability to read status and logs and other microgrid functionality not explicitly defined as privileged. Verification will be by demonstration.

3.1.22 Cybersecurity (Firmware Upgrades)

The IPD shall include a means to upgrade the digital control firmware securely in a fielded system. This update shall not require an internet connection. Any vendor or application software that is necessary for a firmware upgrade shall be provided with the IPD hardware.

Verification will be by demonstration.

The firmware update shall include a secure fallback point such that a device can be reverted back to a previous read-only version either manually, automatically (e.g. on reboot failure), or both.

Firmware updates shall be cryptographically signed by the developing organization and validated during the installation process. Update operations shall be logged into the system log, including the cryptographic identity of the actor updating the firmware. The cryptographic identity shall be cryptographically bound to the log record, i.e., a cryptographic signature over the update log record shall be generated by the actor of the operation and shall exist within the log record.

Verification will be by analysis of vendor design data.

The IPD shall retain operation as a power distribution box in the event of a bad firmware load, or deletion of existing firmware. In other words, the IPD shall have the ability to still function as a basic power distribution panel by disconnecting a controller or through hardware switches.

3.1.23 Compatibility

The system shall be capable of interconnecting with other Services' electrical power distribution systems, utilizing only Military Standard Class-L electrical connectors, with a 3-phase, 5-wire (4-wire with equipment ground) capability (T=O).

Panels shall be able to accept inverter-based power systems that produce 120/208Y VAC 3 phase true sinewave power (T=O). Verification will be by inspection.

3.1.24 Backward Compatibility

IPD equipment shall be capable of operating with MEPDIS-R equipment without modification.

Verification will be by demonstration using MEPDIS-R equipment.

3.1.25 Service Life

IPD panel design and manufacture shall support 15 year service life without major overhaul.

Verification will be by analysis of vendor design data and recommended maintenance schedules.

3.1.26 Wear Out Life

IPD equipment shall be designed and manufactured to support 500 mating cycles without performance degradation. Verification will be by analysis of vendor design data and recommended maintenance/replacement schedules.

3.1.27 Human Factors

Controls and indicators shall allow personnel to readily view system status during day, night, and all‐weather conditions (T=O).

Displays shall identify system status (T=O).

Controls should allow operators/maintainers to view critical information within a minimal number (i.e. 3 to 5) of inputs (T=O).

IPD shall be designed to limit glare such that displays or indicators shall prevent direct / indirect glare from affecting operator vision and when using night vision imaging systems (T=O).

Visual displays shall use illumination methods suitable for blackout conditions in conjunction with the use of standard military night vision devices (T=O).

Interpreting status indicators shall not rely on the user’s color perception (T=O).

IPD shall allow the 5th percentile female through 95th percentile male to operate, maintain (T), and thoroughly decontaminate (O) the system while wearing combat, cold weather and Mission Oriented Protective Posture Level‐IV (MOPP‐IV) uniforms.

IPD shall also comply with MIL‐STD‐1472G (T=O).

Human factors requirements will be verified by demonstration IAW MIL-STD-1472G.

3.1.28 System Safety and Environmental Protection

IPD shall minimize the potential for personal injury or negative environmental impact during transportation, installation, setup, teardown, operation or maintenance in accordance with (IAW) Guideline 1 (Safety Design Criteria – Personnel Hazards) of MIL-HDBK-454B and MIL-STD- 882E. Equipment malfunctions shall not have a cascading effect contributing to further equipment damage or inoperability (T=O). Verification will be by analysis of vendor design data.

3.1.29 Electrical Safety (Personnel and Equipment)

IPD shall protect personnel from injury and equipment from damage resulting from stray voltages, electrical discharges and other risks IAW MIL-HDBK 454B and MIL-STD 1472G (T=O).

Safety feature functionality shall be self-tested by the IPD and presented to the operator via visual status indicators (T=O). Verification will be by demonstration.

Self-testing capability shall include an analysis of the software and hardware during startup and before/after components are added to or removed from the panels to ensure safe operation. Self-testing capability shall also include provisions for identifying changes to load prioritizations, improper load connections or panels being ungrounded (T=O). Verification will be by demonstration.

3.1.30 Electrical Safety (Bonding and Grounding)

The IPD shall include bonding and grounding capability per National Electric Code (NEC) and MIL-HDBK 419A (T). Verification will be by analysis of vendor design data.

IPD shall visually warn personnel when it is connected to the load incorrectly, ungrounded or loses a proper ground during operation (O).

The IPD shall not provide an output if ungrounded, unless personnel override the system manually (O). Verification will be by demonstration.

3.1.31 Electrical Safety (Safety Interlocks)

Safety interlocks shall include a bypass function to allow Maintainers to troubleshoot the system safely during its operation (T=O). Any safety interlock bypass shall visually warn operators that this feature is for maintainers only (T=O). This requirement will be verified by injecting hardware/software faults into the system and MOS 1142 Marines will demonstrate safety interlock bypass functionality.

3.1.32 Electrical Safety (Emergency Stop)

All IPD panels shall possess a readily visible and accessible main power disconnect switch or breaker which when activated will remove all input power (T=O).

The switch or breaker shall control only that panel to which it is attached (T=O). Verification will be by demonstration.

3.1.33 Electrical Safety (Failsafe Mode)

The IPD panels shall have a failsafe mode capability such that when a failure of any electronically controlled and managed portion of the IPD occurs, power is still distributed and panels can be safely operated (T=O). Simply, the intelligent power distribution panels automatically revert to power distribution panels. In addition to an automatic Failsafe Mode, users shall be able to select Failsafe Mode operation to allow power distribution without electronic controls or management enabled (T=O).

In failsafe mode all manual electrical safety, electrical disconnecting means, and overload protection devices shall still function normally (T=O). Verification will be by demonstration.

3.1.34 Labels

IPD equipment shall have labels and indicators to warn of potential human hazards and provide aid to equipment operations (T=O).

All labels shall be of a permanent nature impervious to the environmental conditions identified in this specification (T=O).

Safety markings and labels shall comply with ANSI Z535.4, UL 969 (T=O), and MIL-STD 1472G.

Each panel shall have labels that clearly identity power inputs with consecutive numbers.

Example: “Input 1”, “Input 2”, “Input 3” (T=O).

Each panel shall have labels placed next to power inputs with the following: “Warning: Turn off breaker at generator and on distribution unit prior to disconnecting these inputs” (T=O). Label requirements will be verified by inspection.

3.1.35 Data Plates

IPD panels shall be provided with an identification plate showing the manufacturer's model number, national stock number (NSN), serial number, date of manufacture, and CAGE code.

Verification will be by inspection.

3.1.36 Electromagnetic Interference

IPD shall operate without inhibiting mission accomplishment in operationally representative Electromagnetic Environments (EMEs) as defined in MIL-STD-464C. Control of electromagnetic interference shall be IAW MIL-STD-461G and verified by test using protocols RE102, CE102, and RS103 (T=O).

3.1.37 Nuclear, Biological, and Chemical Decontamination

IPD shall withstand the material damaging effects of biological and chemical contaminants, and be capable of rapid operational decontamination using standard decontaminants and procedures, as specified in FM 3-11.5 Chapter IV. IPD exterior surfaces shall be capable of decontamination using non-corrosive decontaminates with no degradation in corrosion prevention and system performance (T=O). Verification will be by analysis of vendor design data in comparison to FM 3-11.5 Chapter IV Operational Decontamination.

3.1.38 Materials (Electrical)

All material shall comply with NFPA 70 NEC standards. Verification will be achieved with vendor-provided Certificate of Conformance.

3.1.39 Materials (Fungus)

All materials will be non-fungus nutrient IAW MIL-HDBK 454B Guideline 4 (T=O).

Verification will be by analysis of vendor design data.

3.1.40 Materials (Flame)

All materials shall be self- extinguishing when exposed to flame IAW MIL-HDBK 454B Guideline 3 (T=O). Verification will be by analysis of vendor design data.

3.1.41 Materials (Colors)

All cases shall be colored black 37030, green 34094, or tan 33446 IAW FED-STD 595C. The Government reserves the right to choose the final panel colors at the execution of full rate production. Verification will be by inspection.

3.1.42 Unique Identification

All items shall be marked IAW DoD Instruction 8320.04 and MIL-STD 130M. Verification will be by inspection.

3.1.43 Personnel and Tools

All IPD equipment shall be capable of being installed, setup, torn down by MOS 1141 Marine Electricians, and maintained and repaired by MOS 1142 Marine Engineer Equipment Electrical Systems Technicians using SL-3-09015A Electronic Maintenance Tool Kit and the General Mechanics Tool Kit SL-3-11668A. Verification will be by demonstration by MOS 1141 and 1142 Marines.

3.1.44 Setup and Teardown

It shall take less than 2 hours (T) and less than 1.5 hours (O) to set up or tear down all IPD components.

For purposes of testing and reporting, setup time begins when:

a. all equipment is emplaced, (i.e. generator pit has been established and panels are in place),

b. four MOS 1141 operators and all tools are on site, and

c. the Order to setup has been given.

Setup time ends when:

a. all IPMS components are properly connected and operable;

b. pre-operations checks have been completed;

c. grounding rods have been installed; and

d. cables may be installed on the ground surface.

For the purposes of testing and reporting, teardown begins when the Order has been given and ends when all equipment is back to its original emplaced configuration. Verification will be by demonstration by MOS 1141 and 1142 Marines.

3.1.45 Environmental (Operational Temperature)

IPD equipment shall be operable, and meet all specification requirements, during and after exposure to ambient temperature of -25°F (T) / -40°F (O) to 125°F (T) / 135°F (O) while carrying rated load current at rated voltage and frequency at solar loading of 1120 W/m2.

Verification will be by test IAW MIL-STD 810G.

3.1.46 Environmental (Storage Temperature)

IPD equipment shall be operable, and meet all specification requirements, during and after exposure to storage in an ambient temperature of -60°F to 160°F (T=O). Verification will be by test IAW MIL-STD 810G.

3.1.47 Environmental (Transit Drop)

IPD equipment shall be operable, and meet all specification requirements without repair, after being dropped from heights IAW MIL-STD 810G, Method 516.6 Procedure IV. Cosmetic damage is acceptable. Verification will be by test IAW MIL-STD 810G, Method 516.6, Procedure IV.

3.1.48 Environmental (Sand)

IPD shall be operable and meet all specification requirements during and after exposure to windblown sand conditions without becoming unsafe or inoperative when prescribed maintenance procedures are followed. Verification will be by test IAW MIL-STD 810G, Method 510.5, Procedure II.

3.1.49 Environmental (Dust)

IPD shall be operable and meet all specification requirements during and after exposure to windblown dust conditions without becoming unsafe or inoperative when prescribed maintenance procedures are followed. Verification will be by test IAW MIL-STD 810G, Method 510.5, Procedure I.

3.1.50 Environmental (Rain Intrusion)

IPD equipment shall be operable and meet all specification requirements during and after exposure to rainfall of 4 in/hr or less without becoming unsafe or inoperative when prescribed maintenance procedures are followed. Verification will be by test IAW MIL-STD 810G, Method 506.5, Procedure I.

3.1.51 Environmental (Humidity)

IPD equipment shall be operable and meet all specification requirements during and after exposure to 0 - 100% humidity. Verification will be by test IAW MIL-STD 810G, Method 507.5, Procedure I.

3.1.52 Environmental (Salt Fog)

IPD shall be operable and meet all specification requirements during and after exposure to a 5% salt laden air and spray atmosphere (normally encountered in amphibious operations) for up to 120 days without degradation that prevents mission accomplishment when prescribed maintenance procedures are followed. Verification will be by test IAW MIL-STD 810G, Method 509.5.

3.1.53 Environmental (Corrosion)

IPD shall be designed and manufactured to resist corrosion during operation and storage and IAW the operational environmental requirements in this specification. Materials and processes for metallic parts shall conform to applicable requirements in MIL-STD-889C. Protective coatings and surface treatments shall be IAW MIL-STD-7179 and MIL-HDBK-729. Protective coatings shall not be used in areas which lose that coating during the normal course of operation, testing, and maintenance.

The use of hexavalent chromium shall be avoided where possible. Exceptions may be approved by the Government. Verification will be by analysis of vendor design data.

3.1.54 Environmental (Terrain)

IPD shall operate on uneven terrain with omni‐directional grades up to 15 degrees (T=O).

Verification will be by demonstration.

3.1.55 Manpower

All lowest replaceable units must be removable and capable of being installed by no more than two people. Verification will be by demonstration by MOS 1141 and 1142 Marines.

3.1.56 Maintenance (Preventive)

Average allocated time to perform preventive maintenance on a single IPD panel shall not be greater than 3.5 minutes per month. Preventive maintenance time is measured in clockhours and includes hardware inspection and function checks, and software-related preventive maintenance (T=O). Verification will be by analysis of vendor design data and recommended maintenance schedules as well as by timing MOS 1142 Marines while conducting vendor-specified preventive maintenance.

3.1.57 Maintenance (Corrective)

Allocated time to perform corrective maintenance (CM) on a single IPD panel shall not be greater than 4 hours per month. CM time is measured in manhours and includes failure isolation, removal and replacement or repaired of component, and verification that the failure is corrected (T=O). Verification will be by analysis of vendor design data and recommended maintenance schedules as well as by timing MOS 1142 Marines while conducting vendor-specified CM.

3.1.58 Maintenance (Storage)

IPD shall not have a preventative maintenance requirement while in long term storage configuration shorter than 12 months (T) 24 month (O). Verification will be by analysis of vendor design data and recommended maintenance schedules.

3.1.59 Operational Availability

IPD shall have an operational availability (Ao) of 99.8%. Ao will be verified by test and calculated as Uptime/(Uptime+Downtime). Ao applies to seven IPD panels (i.e. 4x60KW or 4x30KW AMMPS generators, one ESU, 1x1200 Amps, 2x800 Amps, and 4x200Amps panels) that support a representative microgrid. Uptime includes time the system is capable of performing its mission. Downtime includes time the system isn't mission capable due to system failure and associated logistics, and maintenance time.

3.1.60 Configuration (200Amps Power Panel)

Each panel shall weigh less than 160 pounds (without cables). Verification will be by demonstration via weighing.

Each panel shall have a volume no greater than 10.39 ft3. Verification will be by demonstration via measuring.

Each panel shall have enough lifting/carrying handles to accommodate the number of people needed to lift and carry the weight of the panel, with gloved hands, per MIL-STD-1472.

Verification will be by demonstration by MOS 1141 or 1142 Marines.

Each panel shall have hardware to allow grounding. Verification will be by inspection.

Each panel shall have 2 inputs, each for 5-wire, 3-phase, 100 Amp capacity, Pin and Sleeve IEC 60309 with input breaker and lamps on each phase. Incoming and outgoing power ports shall be equivalent to MEPDIS-R panels. Note: two (2) inputs may simultaneously be supplying power to the power panels.

Paralleling of generators into the panel is a required capability. Verification will be by demonstration.

Each panel shall have outputs breakered for the following:

• Four (4) each 5-wire 3-phase 60 Amp Pin and Sleeve IEC 60309 Receptacle

• Two (2) each 5-wire 3-phase 30 Amp Pin and Sleeve IEC 60309 Receptacle

• Two (2) each 5-wire 3-phase 20 Amp Pin and Sleeve IEC 60309 Receptacle

• Two (2) each 3-wire 1-phase 20 Amp Pin and Sleeve IEC 60309 Receptacle

• One (1) each GFCI Covered 120 VAC 1-phase duplex receptacle rated at 20 Amps Verification will be by inspection.

3.1.61 Configuration (800Amps Power Panel)

Each panel shall weigh less than 310 pounds (without cables). Verification will be by demonstration via weighing.

Each panel shall have a volume no greater than 17.3 ft3. Verification will be by demonstration via measuring.

Each panel shall have enough lifting/carrying handles to accommodate the number of people needed to lift and carry the weight of the panel, with gloved hands, per MIL-STD-1472.

Verification will be by demonstration by MOS 1141 or 1142 Marines.

Each panel shall have hardware to allow grounding. Verification will be by inspection.

Each panel shall have two sets of color coded Cam Type 16, 5-wire inputs, switched 400 Amps, with lamps on each phase. Incoming and outgoing power ports shall be equivalent to MEPDIS- R panels. Note: two (2) inputs may simultaneously be supplying power to the power panels.

Paralleling of generators into the panel is a required capability. Verification will be by demonstration.

Each panel shall have outputs breakered for the following:

• One (1) each Cam Type 16 400 Amp 5-wire connection breakered at 200 Amps.

• Four (4) each 5-wire, 3-phase 100 Amp Pin and Sleeve IEC 60309 Receptacle.

• Two (2) each 5-wire, 3-phase 60 Amp Pin and Sleeve IEC 60309 Receptacle.

• Two (2) each 5-wire, 3-phase 30 Amp Pin and Sleeve IEC 60309 Receptacle.

• Two (2) each 5-wire, 3-phase 20 Amp Pin and Sleeve IEC 60309 Receptacle.

• Two (2) each 3-wire, 1-phase 20 Amp Pin and Sleeve IEC 60309 Receptacle.

• One (1) each GFCI Covered 120 VAC 1-phase duplex receptacle rated at 20 Amps.

Verification will be by inspection.

3.1.62 Configuration (1200Amps Power Panel)

Each panel shall weigh less than 350 pounds total (without cables). Verification will be by demonstration via weighing.

Each panel shall have a volume no greater than 17.3 ft3. Verification will be by demonstration via measuring.

Each panel shall have enough lifting/carrying handles to accommodate the number of people needed to lift and carry the weight of the panel, with gloved hands, per MIL-STD-1472.

Verification will be by demonstration by MOS 1141 or 1142 Marines.

Each panel shall have hardware to allow grounding. Verification will be by inspection.

Each panel shall have three sets of color coded, Cam Type 16, 5-wire switched inputs, 400 Amps, with lamps on each phase. Incoming and outgoing power ports shall be equivalent to MEPDIS-R panels. Note: three (3) inputs may simultaneously be supplying power to the power panels.

Paralleling of generators into the panel is a required capability. Verification will be by demonstration.

Each panel shall have the following outputs:

• Two sets of color coded Cam Type 16, 5-wire outputs, 400 Amps, with lamps on each phase.

• Two (2) 100 Amp, 5-wire, 3-phase, Pin and Sleeve IEC 60309 receptacles.

• One (1) each GFCI Covered 120 VAC 1-phase duplex receptacle rated at 20 Amps.

• All outputs shall be breakered.

Verification will be by inspection.

3.1.63 Transportability

IPD shall be capable of being transported by strategic or tactical air and land assets; and sea via naval, Maritime Pre‐positioning Force (MPF), commercial shipping, or as loose cargo on trucks, trailers, or tracked vehicles.

Surface transport assets shall include common rail carrier, commercial truck, and tactical vehicles and trailers (T=O). Verification will be by test IAW MIL-STD 810G Method 514.6 Procedure II and analysis of vendor data IAW MIL-STD 1366E Section 5.

Strategic Air assets for internal transport shall include C‐130, C‐17, and C‐5, (T=O).

Verification will be by analysis of vendor data IAW MIL-STD 1791C Section B.

Ship assets shall include U.S. Navy amphibious assault ships, landing craft and landing craft air cushion (LCAC), MPF, and commercial shipping (T=O). Verification will be by analysis of vendor data IAW MIL-STD 1366E Section 5.

Tactical Air for internal transport shall include CH‐53 and MV‐22 (T=O). Verification will be by analysis of vendor data IAW MIL-STD 1366E Section 5.

3.1.64 Silent Watch

IPD shall not emit audible noise discernible at 65.6 feet. Verification will be by test IAW MIL‐ STD‐1474E Appendix C Level I non‐detectability limits (T=O).

4.0 VERIFICATION

The Verification Method indicates how each performance specification will be verified. The following are the accepted values:

Analysis: Verification by technical evaluation using mathematical equations,…