PWS -AFTAC InRow Cooler Maintenance rev1.pdf

-30

Air Force Technical Applications Center (AFTAC)

Data Center InRow Cooler Maintenance Service

1 March 2025

1. Performance Work Statement AFTAC Data Center InRow Cooling Maintenance

2. Purpose Procure a Firm Fixed Price contract (12 month base period of performance with four 12 month options) for InRow Cooler maintenance, including technical services, repairs, parts, firmware updates and expertise delivered at the AFTAC data center environment at Patrick Space Force Base, Florida.

Anticipated period of performance (POP):

Base: 27 Sep 2025 through Sep 26 2026 Option 1: 27 Sep 2026 through Sep 26 2027 Option 2: 27 Sep 2027 through Sep 26 2028 Option 3: 27 Sep 2028 through Sep 26 2029 Option 4: 27 Sep 2029 through Sep 26 2030

3. Technical Requirements The contractor shall ensure that all applicable Commercial-Off-The-Shelf (COTS) IA and IA-enabled products comply with AFI 17-130, Air Force Cybersecurity Program Management. All IT hardware, firmware, and software components or products incorporated into DoDIN must comply with evaluation and validation requirements in DoDI 8500.01 and Committee on National Security Systems Policy-11 (CNSSP-11), National Policy Governing Acquisition of IA Products. Refer to CNSSP No. 11 for the latest process and policy guidance on this subject.

Required maintenance support will include:

• Next Business Day (NBD) On-Site Support/Service

• Manufacturer Electric Services Technical Support Service at a US Call Center(s), through local access support phone numbers and online tools

• Firmware releases and updates

• Access to self-help tools

• Electric notifications http://static.e-publishing.af.mil/production/1/saf_cio_a6/publication/afi17-130/afi33-200.pdf http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/850001_2014.pdf

• Preventive Maintenance Service

• Semi-annual Preventive Maintenance for cooling systems

Due to changing IT environments, equipment failure/replacement, and hardware refresh schedules, an annual true up of the equipment requiring maintenance coverage should be anticipated by the contractor. This will allow for the removal of obsolete equipment from maintenance/support coverage and the addition of new equipment that replaces it in order for all equipment to continue to function as a system and to reduce the number of separate maintenance support contracts.

3.1 Special Asset Tagging

The contractor shall provide special asset tags IAW MIL STD-130, DODI 8320.04, Item Unique Identification (IUID) Standards for Tangible Personal Property and DFARS 252.211-7703, Item Identification and Valuation. The current list of accepted unique item identifier types is maintained at http://www.acq.osd.mil/asda/dpc/ce/ds/unique-id.html.

3.2 Energy Star Mandate

The contractor shall ensure the product meets Energy Star guidelines.

3.3 IPV6 Mandate

The contractor shall ensure the product meets IPV6 capabilities per Unified Capabilities Requirements 2013 (UCR 2013) and certified by the DoDIN Approved Products List. The DoDIN Approved Products List is a consolidated list of products that have completed interoperability and information assurance certification and is managed by Defense Information Systems Agency (DISA).

3.4 BIOS Mandate

Per DoD CIO, the contractor shall ensure that all x86 and x64 laptops and desktops are BIOS protection compliant IAW Section 3.1 of NIST Special Publication 800-147 (BIOS Protection Guidelines).

3.5 Trusted Platform Module (TPM) Mandate

In accordance with DoDI 8500.01, computer assets will include a Trusted Platform Module (TPM) version 2.0 or higher. TPMs must be in conformance with Trusted Computing Group standards and ISO/IEC 11889-1:2009 through ISO/IEC 11889-4:2009.

3.6 Common Criteria Evaluation & Validation Scheme Mandate

The contractor shall ensure that products used to protect information on National Security Systems are certified by the NIAP/CCEVS approved product list.

3.7 FIPS 140-3 Encryption Mandate

The contractor shall ensure all cryptographic products have Federal Information Processing Standards 140-3 (FIPS 140-3) security certification according to the FIPS 140-3 approved products list.

3.8 FIPS 201 Federal Identity Credentialing and Management (FICAM) Mandate The contractor shall ensure that products used to create, print or read smart cards are FIPS 201 compliant and certified by the FICAM approved product list.

http://www.acq.osd.mil/ http://energy.gov/eere/femp/covered-product-categories http://www.disa.mil/%7E/media/Files/DISA/Services/UCCO/UCR-2013-Change2/UCR-2013-Change2.pdf http://www.disa.mil/Services/Network-Services/UCCO https://aplits.disa.mil/processAPList.action http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-147.pdf http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-147.pdf http://www.trustedcomputinggroup.org/ http://www.gpo.gov/fdsys/pkg/USCODE-2011-title44/html/USCODE-2011-title44-chap35-subchapIII-sec3542.htm http://www.gpo.gov/fdsys/pkg/USCODE-2011-title44/html/USCODE-2011-title44-chap35-subchapIII-sec3542.htm https://www.niap-ccevs.org/CCEVS_Products/pcl.cfm?tech_name=ALL&amp%3BCFID=22543646&amp%3BCFTOKEN=4d4019f9af9ec29e-6DF8BA93-B5B6-A468-778922C860FE86F2 https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search https://www.idmanagement.gov/fips201/ https://www.idmanagement.gov/buy#products/

3.9 Biometric Mandate

The contractor shall ensure that all biometric products be built to the DoD Electronic Biometric Transmission Specification (EBTS) standard. A list of FBI certified products can also be viewed for product specifications and certification.

3.10 High Assurance Internet Protocol Encryptor (HAIPE) Mandate The contractor shall provide IA enabled products that are compliant with the NSA HAIPE program. The contractor shall provide the NSA HAIPE certification from the OEM upon delivery.

3.11 TEMPEST Program Mandates

The contractor shall provide TEMPEST products certified by the NSA TEMPEST Program. Visit the NSA Information Assurance site for more information.

3.12 Software Tagging Mandate

The contractor shall ensure COTS software items support International Standard for Software Tagging and Identification, ISO/IEC 19770-2, Software Tags when designated as mandatory by the standard. Further guidance can be found at: https://www.iso.org/standard/65666.html.

3.13 Radio Frequency Identification (RFID) Mandate

The contractor shall provide RFID tagging IAW DoD Radio Frequency Identification Policy, 30 July 2004, or most current version, and DFARS 252.211-7006, Passive Radio Frequency Identification. The contractor shall encode an approved RFID tag using instructions provided in the EPC™ Tag Data Standards in effect at the time of award. Additional information can also be found at the OASD for Sustainment.

3.14 Section 508 of the Rehabilitation Act Mandate

The Contractor shall meet the requirements of the U.S. Access Board’s regulations at 36 CFR Part 1194 which implements Section 508 of the Rehabilitation Act of 1973, as amended. For more information about DoD Section 508 specific responsibilities, see the DoD CIO website.

3.15 Electronic Products Environmental Assessment Tool (EPEAT) In accordance with Executive Orders 13423 and 13514, and FAR Part 39.1, when acquiring an electronic product, an EPEAT® registered electronic product should be acquired unless the agency determines, in accordance with agency procedures, that the EPEAT® registered product will not be cost effective over the life of the product. EPEAT® electronic products are designated “bronze,” “silver,” or “gold” registered. Agencies shall, at a minimum, acquire EPEAT® bronze-registered products. Agencies are encouraged to acquire EPEAT® silver or gold registered products. Visit the EPEAT website to see if your product is registered.

https://fbibiospecs.fbi.gov/what-we-do https://www.fbibiospecs.cjis.gov/EBTS/Approved https://fbibiospecs.fbi.gov/ebts-1/approved-ebts https://www.iad.gov/iad/programs/iad-initiatives/tempest.cfm https://www.iso.org/standard/65666.html http://www.dtic.mil/dtic/tr/fulltext/u2/a465862.pdf https://acc.dau.mil/adl/en-%20S/142796/file/27748/%20RFIDPolicy07-30-2004.pdf https://www.gs1.org/standards/rfid https://www.acq.osd.mil/log/sci/rfid_FAQs.html https://www.access-board.gov/sitemap.html http://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-section-508-standards/section-508-standards https://www.section508.gov/manage/laws-and-policies https://dodcio.defense.gov/DoDSection508.aspx https://epeat.net/

4 Base Year Ordering Table

Line Part Number Description Qty

Inspection, Maintenance, Repair and Service Plan for InfraStruxure InRow RP Chilled Water Coolers

JK1124004415, JK1125004069. JK1125004074, JK1140003112,

JK1140003115, JK1140003123, JK1140003142, JK1140003147,

JK1140003149, JK1140003150, JK1140003154, JK1143011670,

JK1232000323, JK1242030063, JK1242030074, JK1250001456,

JK1313000323, JK1313000324, JK1313000328, JK1313000339,

JK1313000340, JK1313000345, JK1313000346, JK1313130045,

JK1313130046, JK1319000064, JK1319001159, UK1036211828,

UK1049310496, UK1050211603 UK1050211634, UK1050211654,

UK1111310027,UK1111310037,UK1111310049, UK1113210157,

UK1113210163, UK1113210193, UK1115210024, UK1115310001,

UK1118211846, UK1118211872, JK1318001517, JK1318001509,

JK1318001528, JK1319000058, JK1618004928, JK1627006442,

JK1627006434, JK1616007052, JK1618004926, JK1618004942,

JK1611001810, JK1618004947, JK1910002319, JK1635004234,

JK1637001595

5 Technical Contractual Requirements

5.1 Technical Refresh

To ensure new design enhancements and technological updates or advances, the contractor shall offer, under this DO, hardware and software components available to the contractor's commercial customers. Furthermore, the contractor shall make available any commercially available updates to the hardware and software provided under this DO. If such updates are available to other customers without charge, then they shall also be made available to the Government without additional charge. The contractor will ship these updates to existing customers who have acquired the hardware/software being updated under this DO. Vendor commercial product offerings shall include “state of the art” technology, i.e., the most current proven level of development available in each product category.

5.2 Trade Agreement Act (TAA)

All proposed products must be compliant with the Trade Agreements Act of 1979 (TAA) and related clauses in Section I of this contract. In accordance with DFARS 252.225- 7021, the Trade Agreements Certificate at DFARS 252.225-7020 shall be provided for each end item defined and specified in a solicitation that exceeds the TAA threshold subject to the waivers and exceptions provided in FAR 25.4, and DFARS 225.4 offered in response to any RFQ issued under this contract. Please note that Federal Acquisition Regulation (FAR) paragraph 25.103(e) includes an exemption from the Buy American Act (BAA) for acquisition of information technology that is commercial items.

5.3 Authorized Resellers

The contractor may be an authorized reseller of new and refurbished/remanufactured equipment for OEMs proposed under this DO. The contractor may also procure directly from the OEM or utilize other legitimate distribution channels to provide the required products in accordance with the OEM’s policies on reselling. Any contractor’s channel relationships with their OEM partners (gold, silver, etc.) will be represented in the best pricing offered. If the contractor is not an OEM reseller, the contractor shall clearly identify this on the submitted proposal and list the OEM resell partner’s registered relationship with the OEM. DOs may restrict the use of authorized resellers, specific OEMs, or identify required OEMs. The contractor shall ensure all products are genuine and eligible for any OEM warranties, maintenance agreements and licensing as offered.

Genuine products are those products the OEM, by their policy, considers not “secondary”, destroyed, stolen or scrapped.

5.4 Remanufactured/Refurbished Products

No remanufactured or refurbished products shall be accepted.

5.5 Items on Backorder

In their response to a Request for Quote (RFQ), the contractor shall provide notification, if applicable, that a particular item is on backorder, the expected lead-time to fulfill the order, etc. It shall be implicit that a response to an RFQ with no items identified on backorder is a declaration that the items are available at the time of quote submission.

5.6 Warranty

The contractor shall provide any OEM pass through warranty and standard commercial warranties applicable to the products being purchased at no cost. This shall apply to new, refurbished and remanufactured equipment.

5.7 Hardware and Associated Software and Peripherals

All hardware delivered under this DO shall include associated software, documentation and associated peripherals required for operations (such as controllers, connectors, cables, drivers, adapters, etc.) as provided by the OEM. This is true only if the applicable OEM provides such items with the product itself.

5.8 Software

For all software that is outside of hardware and purchased independently, the contractor shall provide the software license registered to the customer’s organization.

5.9 Safeguarding Classified Information

The contractor shall transmit and deliver classified material/reports IAW the National Industrial Security Program Operations Manual (NISPOM) and the National Industrial Security Program Operating Manual (DoD 5220.22-M). These requirements shall be accomplished as specified in the Delivery Order. All Classified Contracts must have at a minimum, the Clause 52.204-2 Security Requirement, incorporated into the contract.

5.10 Installation

The only time that installation services can be procured is when the services and cost are included in the price of the product as sold commercially. In the rare instances where installation services are required/offered, the contractor shall provide installation support related to the applicable products(s) as defined in the DO. In those instances, the DD Form

254 (DEPARTMENT OF DEFENSE CONTRACT SECURITY CLASSIFICATION

SPECIFICATION) requirements will be addressed in the individual DO and only at the security level necessary.

5.11 Customer Support

The prime contractor shall provide 24x7 live telephone support during the warranty period to assist in isolating, identifying, and repairing software and hardware failures, or to act as liaison with the manufacturer in the event that the customer requires assistance in contacting or dealing with the manufacturer.

5.12 Product Maintenance

The contractor shall provide associated maintenance and upgrades to include spares/parts and emergency support worldwide, during the warranty period.

5.13 Security Requirements

Overarching security requirements and contractor access to classified information will be as specified in the attached DD254, Department of Defense Contract Security Classification.

Contractor personnel performing work under this contract shall have a final U.S. Government issued TOP SECRET security clearance with a current Single Scope Background Investigation (SSBI) at the time of the proposal submission and must maintain the level of security required for the life of the contract. Authorization for Access to Sensitive Compartmented Information (SCI) will be in accordance with Intelligence Community Directive 704 (ICD 704), Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information. An amended DD254 will also be required for any subcontractors to gain access to the facility.

6 Delivery Requirements

6.1 Timeframes

Information Technology orders will be rated under the Defense Priorities and Allocation System (DPAS) with timelines identified during the award process. Title 15 Code of Federal Regulations (CFR) Part 700 is administered by the Department of Commerce, Bureau of Industry and Security. DPAS implements the priorities and allocations authority of the Defense Production Act, including use of that authority to support emergency preparedness activities pursuant to Title VI of the Robert T. Stafford Disaster Relief and Emergency Assistance Act (42 U.S.C. 5195 et seq.), and the priorities authority of the Selective Service Act and related statutes, all with respect to industrial resources. The DPAS establishes procedures for the placement, acceptance, and performance of priority rated contracts and orders and for the allocation of materials, services, and facilities.

6.2 DO Order Shipping Date

This will be a DPAS DO-A7 rated order.

6.3 Delivery Delays

Contractors are required to meet the timeframes as stated in section 6.1 unless Department of Commerce approval and/or review activities prevent the contractor from meeting these timeframes. In the event that the contractor determines they are unable to achieve the stated timeframes, the contractor shall notify the Contracting Officer within two (2) business days of such determination, or immediately upon such determination if operating under the Emergency/War Tempo timelines.

https://www.dni.gov/files/documents/ICD/ICD-704-Personnel-Security-Standards-and-Procedures-for-Access-to-SCI-2018-06-20.pdf https://www.ecfr.gov/current/title-15/subtitle-B/chapter-VII/subchapter-A/part-700#700.1 https://www.ecfr.gov/current/title-15/subtitle-B/chapter-VII/subchapter-A/part-700#700.1 https://www.govinfo.gov/link/uscode/42/5195