P01 PD Attachment A - CD-DVD Encryption Software Requirements.xlsx

This is a technical requirements specification document for CD/DVD enterprise encryption software that the Department of Veterans Affairs is seeking to procure. The document outlines minimum functional and operational requirements that proposed software solutions must meet, including mandatory encryption standards, operating system compatibility, deployment capabilities, and system integration features.

The specification requires that all communication between agents and console be encrypted, with FIPS 140-3 compliant encryption for both data-in-motion and data-at-rest by September 2026 (supported by NIST certification number or proof of submission). The software must support Windows 11 Professional and be deployable through standard VA methods using BigFix or Configuration Manager. Additional requirements include centrally managed agents, configurable logging levels, network-based software updates, web-based management console accessible to multiple concurrent users, a GUI-based query and reporting tool with export capability in DOC, PDF, and XML formats, API-driven SIEM integration, Microsoft Active Directory integration, user access level management, and the ability to operate without impairing system performance or degrading managed system capabilities. This RFI is associated with solicitation VA-26-00046223 and was released by the Department of Veterans Affairs Technology Acquisition Center in Austin, with responses due by March 17, 2026 at 10:00 AM EST, limited to a 10-page capability statement with no marketing materials permitted.