RLP No. 8AL2178 - Exhibit E - TSA IT Installation Guidance v.07 20240214.pdf

TSA IT INSTALLATION GUIDANCE

APPLICABLE TO ALL TSA FIELD

SITES/LOCATIONS

1 COVERSHEET

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

END USER SERVICES DIVISON; FIELD RELATIONS BRANCH

TSA INFORMATION TECHNOLOGY (IT)

INSTALLATION GUIDANCE

SITES/LOCATIONS

2 TOTAL TSA INFORMATION TECHNOLOGY REQUIREMENTS

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSA IT Systems planning is sub‐divided into several areas, planned & coordinated by several TSA groups.

The EUSD, IT Field Regional Manager (FRM) develops a customized set of IT requirements for each project that address the installation of TSA backbone infrastructure, vertical and horizontal cabling and IT closets (cabinets) for TSANet, the administrative IT network of TSA.

The project specific, custom scope document supersedes the TSA Real Estate Management Branch’s Program of Requirements (POR) and the GENERAL TSANet REQUIREMENT FOR TSA OPERATIONAL SPACES (found in this document), providing more detailed guidance as to the configuration and installation of the systems resident at the site.

The local TSA project lead and the project sponsor (airport) should contact the appropriate REMD Realty Services Manager to ensure the project is using the most current POR version; see sections: Electrical and Telecommunications, Communications Closet, Guidelines for Structured Cabling Systems

The custom, project specific IT scope does not address installation of IT systems/cabling supporting:

Checkpoint Property Screening Systems (CPSS) and Checkpoint related Transportation Screening Equipment (TSE) / Security Technology Integrated Program (STIP) systems.

CPSS and TSE/STIP cabling guidelines for Security Screening Checkpoints (SSCP) are found in the Checkpoint Requirements and Planning Guide (CRPG), see chapter 7, Electrical and

Data.

TSA Acquisition and Program Management, Checkpoint Design group, should be contacted to ensure your are using the most current CRPG version.

IMPORTANT: DHS/TSA policy restricts CPSS supporting technicians from having physical access to TSA IT cabinets, see page titled SECURITY ACCESS CONTROLS TO TSA DATA

SYSTEMS for detailed guidance.

POC: James Spieker; 571‐481‐6083, james.spieker@tsa.dhs.gov

Checked baggage inspection systems.

IT system/cabling guidelines for checked baggage inspection systems are found in the Planning Guidelines and Design Standards for Checked Baggage Inspection Systems (PGDS).

The TSA Electronic Baggage Screening Program (EBIS) should be contacted to ensure you are using the most current PGDS version.

Website: https://www.tsa.gov/for‐industry/electronic‐baggage‐screening

Physical Security systems.

IT system/cabling requirements for physical security systems are found in a site/project specific Physical Security Statement of Work (SOW).

The physical security SOW is submitted via the TSA Real Estate Management Division (REMD).

Contact the Physical Security Field Help Desk; 571‐227‐4735, fieldhelpdesk@tsa.dhs.gov; to be directed to your project’s Physical Security Field Support Unit Representative.

Automated Screening Lanes (ASL).

ASL systems and cabling are planned by the chosen vendor.

IMPORTANT: DHS/TSA policy restricts ASL supporting technicians from having physical access to TSA IT cabinets, see page titled SECURITY ACCESS CONTROLS TO TSA DATA

SYSTEMS for detailed guidance.

SITES/LOCATIONS

3 SECURITY ACCESS CONTROLS TO TSA DATA SYSTEMS

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

Key points from these references:

Components [TSA] shall limit access to system software and hardware to authorized personnel.

Physical and environmental security shall be implemented that maximizes information system and network protection from unauthorized physical access.

Areas containing information system servers, controlled interface equipment, associated peripherals, communication equipment, patch panels, etc., or areas where restricted actions occur (to include information assurance monitoring, system administration, etc.) shall be deemed Information Security Restricted Areas (ISRA).

Access to ISRAs shall be limited to authorized personnel. The list of authorized personnel shall be reviewed at least annually. IT closets located in either an ISRA or public area shall have an Emergency Contact List (ECL) on both the inside and outside of the IT closet door. A copy shall be placed inside the cabinet in the event the outside list is removed or misplaced (or is operationally inappropriate).

Information Security Restricted Areas (ISRAs) shall be clearly labeled and have an up‐to‐date access control list (ACL) posted inside the door in compliance with DHS and TSA physical access policy. Standalone IT cabinets containing IT related equipment and located in an open non‐ISRA shall have signage on the interior of the IT cabinet door and shall adhere to standard operational security practices.

ISRA requirements shall extend to TSA IT assets located at non‐TSA facilities and non‐TSA IT assets and equipment hosting TSA data

DHS Sensitive Systems Policy Directive 4300A, v. 12.01 dated February 12, 2016 (https://www.dhs.gov/publication/dhs‐4300a‐sensitive‐systems‐handbook) TSA Information Assurance Handbook, Attachment 1 to TSA MD 1400.3 IT Security (https://office.ishare.tsa.dhs.gov/sites/ITSEC/CP/PC/policy/Internal%20Shared%20Documents/Projects/TSA%20IA%20HB%20v14.1%20Final.pdf)

References:

For access control purposes, TSA IT racks/cabinets are defined as IT racks/cabinets supporting software and hardware for the TSA Enterprise Network (TSANet).

Per DHS and TSA policy, TSA IT equipment should only be placed in TSA IT Cabinets.

Per DHS and TSA policy, IT equipment supporting baggage handling, ASL or other TSA related, but not TSA Information Technology systems cannot not be placed in TSA IT Cabinets.

The ideal configuration for TSA IT cabinets is within TSA controlled access spaces (TSA only access).

TSA controlled IT spaces are not universally possible for all IT cabinets at field sites.

TSA IT systems shall be afforded the most practical amount of physical security possible to mitigate risk (probability & impact) at all TSA IT cabinet locations.

Per DHS and TSA policy, the following systems shall not be housed in TSA IT cabinets (racks):

Credential Authentication Terminals (CAT and subsequent iterations of CAT systems) Physical Security (to include ePACS, even though peripherally connected to TSANet) CPSS (or ASL) baggage handling systems (belts, diverters etc) for TSA Security Screening Checkpoints (SSCPs) Electronic Baggage Inspection Systems (EBIS) / Baggage Handling Systems (BHS) Duress alarm systems Airport CCTV systems Wireless carriers or wireless support systems (repeaters for AT&T, Verizon, T‐Mobile etc.)

Contractors supporting these systems, even in a direct contractual relationship with TSA, are only authorized limited, escorted access to TSANet system software and hardware, for purposes of configuration, management, or upgrade of their respective system.

SITES/LOCATIONS

4 INSTALLATION GUIDANCE FOR IT CABINETS / COMMUNICATIONS CLOSETS

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

General guidance for IT Cabinets / Communications Closets. Additional information regarding IT Cabinets / Communications Closets can be found in the TSA POR.

Standards recommend that all premise data equipment be mounted in a standard 19” Closed, Open, or Wall‐Mount IT Cabinets, in a secured telecommunications closet within the TSA controlled space.

If located in Shared IT Communications or Equipment Rooms, Closed Floor or Wall Mount Racks are recommended. These cabinets should include power strips, side panels, and fans for ventilation if required.

TSA standards state the necessity for bolting all full size racks to the floor for seismic requirements and security or local earthquake zone standards if greater.

If access floors exist for cable routing, there shall be a minimum of 6 inches of clear space from the bottom of the floor panel to the deck below.

The cabinet with data equipment and rack with patch panel shall be connected via cable ladder for cable routing.

The GSA/Airport/Site Contractor shall:

Provide one ground connection to each rack/IT cabinet in the any communications closet.

Provide (2) 4” conduit stubbing sleeves to above dropped ceiling, mounted above each rack (preferred).

Interconnect (2) data racks with an overhead cable tray. Refer to IT POR Documentation.

Install 3/4” Plywood paneling to start at 18” AFF, per the POR.

Equipment room / Main Distribution Frame (MDF)

This room shall be designed/sized to serve the entire building/facility/location and is to be centrally located so as to ensure that all cabling lengths are less than 90 m (295 ft) to locations it directly services.

The MDF should be 10 x 15 ft. or larger.

The MDF contains the TSA Data Network equipment (Router, Servers, and Switches).

If required, this room shall interconnect with each Intermediate Distribution Facility (IDF) via distinct, dedicated single‐mode fiber optic backbone cabling.

Power outlets for TSA MDFs will be installed inside the cabinet (or securable, only TSA IT accessible area).

The MDF is supported by a UPS.

Telecommunications rooms & enclosures / Intermediate Distribution Frame (IDF)

This room shall be designed/sized to serve any spaces or areas of the building/facility/location, which are in excess of 90 m, (295 ft.) from the MDF.

IDFs, if located in an IT closet, should be 8 x 8 ft. or larger. Design of IDFs is custom to the site, and operationally dependent.

The IDF typically only contains Patch Panels and Switches.

This room is to be centrally located so as to ensure that all cabling lengths are less than 90 m (295 ft) to locations it directly services.

Power outlets for TSA IDFs will be installed inside the cabinet (or securable, only TSA IT accessible area).

The IDF is supported by a Surge Suppressor.

SITES/LOCATIONS

5 SITE IT BUILD OUT & IT CABLING/WIRING GUIDANCE

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

Build Out

All components, labor, and manpower to install the TSA MDF and associated IT infrastructure at the new TSA office spaces are to be supplied, installed, and tested as part of the build‐out of the TSA Office Space, by the GSA/Airport/ Site Contractor.

IT Cabling/Wiring Additional information on TSA electrical requirements can be found in the TSA CRPG and POR.

As indicated, all TSA data cabling (Cat6) is to be home‐run (end‐to‐end) back to the TSA IT Cabinet.

A "drop" (data drop) is basically one run of cable from a starting point (usually the wiring closet or server room) to the end point (usually an office or cubicle). A drop may also be referred to as the station‐end of an IT cable run.

Each installed data cable must be terminated at the station end to an appropriate faceplate using the CAT6 modular jack.

The termination configuration for all data cables will be 568B and will terminate all pairs of the cable.

All cables and materials used will comply with all applicable local standards for building and electrical materials and construction.

No cable run should exceed 100 Meters in total length.

Each new data cable, including the modular jack, shall be certified for true Category 6 performance, the tester must test all cables up to 100 MHz. Test results shall be furnished upon install completion.

Final Space drawings will determine exact locations of all TSA Network data drops.

If required, any IT cabinet will be installed with sufficient space for mounting, and opening, of the cabinet.

TSA typically requests 12 strand (6 pair) single mode fiber optic cable (SMF) for all cabling/wiring between the service demarcation, TSA Main Distribution Frame (MDF) and TSA Intermediate Distribution Frames (IDFs).

All cables, modular outlet jacks, faceplates and terminations shall be clearly labeled for ease of identification per the TSA labeling specifications found on the page titled LABELING, PATCH PANEL DESIGNATION/LABELING AND CABLE STANDARDS and the TSA POR.

All cables and faceplates will be labeled utilizing a logical labeling scheme consistent with the currently installed cable plant.

All IT cables/wiring installed shall comply with TIA/EIA standards.

SITE IT BUILD OUT & IT CABLING/WIRING GUIDANCE:

The following information; Build Out, IT Cabling/Wiring, Installation Guidance for IT Cabinets / Communications Closets, and Electrical and HVAC Requirements; directly reflects or augments information presented in the TSA Program of Requirements, version 1.03 (dated 6/1/2023), from the TSA Office of Finance and Administration.

Information Technology (IT) relevant portions of the POR This includes:

Section 2.10 Electrical and Telecommunications LAN1 – IT/LAN/Sever/Communications closet (Page 31) Section 7.0 Guidelines for Structured Cabling Systems

SITES/LOCATIONS

6 TSA FIELD SITE SPACES

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSA has two, over arching categories of spaces for field sites:

1. Operational (mandated) spaces

2. Leased spaces

This document provides general guidance for build out of the TSA administrative network (TSANet) in support of construction, renovation or other projects impacting TSANet.

For OPERATIONAL (mandated) TSA spaces, the space “typicals”, found on the page titled OPERATIONAL SPACE TSANet TYPICALS These “typicals” are meant to be used purely as a reference The final TSANet requirements for operational spaces are dictated by the size and configuration of those spaces and may vary from what is shown here.

For LEASED TSA spaces, please refer to the TSA Real Estate Management Program of Requirements (POR) for space “typicals”.

The Space Typicals section of the POR outlines the spaces that are common throughout TSA and provides a typical example of each space.

The examples provided are meant to be used purely as a reference, and the final space size and configuration may vary from what is shown.

All TSANet requirements for space typicals for both Operational (mandated) and Leased spaces are superseded by the customized set of IT requirements for each project, drawn up the TSA IT Field Regional Manager.

Leased Spaces Leased spaces are under contract between the site and TSA Real Estate Management.

Leased spaces are provisioned (“built out”) by TSA Real Estate Management (or GSA if applicable) to support TSA staff providing services relating to aviation security.

TSANet requirements for leased spaces are generated by site requirements (from the TSA field site) and approved space/furniture layouts (from the TSA Real Estate Management Office).

Operational (mandated) Spaces Operational (mandated) spaces are provided and provisioned (“built out”) by the Airport.

Operational spaces are designated by the DHS Appropriations Act of 2004 (Public Law 108‐334), section 511 (page 21).

SITES/LOCATIONS

7 TSANet REQUIREMENTS FOR OPERATIONAL SPACE TYPICALS

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSANet Requirements for Operational Space Typicals

This section outlines the operational spaces that are common throughout TSA, and provides “typical” TSANet requirements for each space.

These examples are meant to be used purely as a reference; the final TSANet requirements for operational spaces are dictated by the size and configuration of those spaces and may vary from what is shown here.

The spaces outlined in this section are as follows:

TSANet IT Rooms/closets – see page titled INSTALLATION GUIDANCE FOR IT CABINETS / COMMUNICATIONS CLOSETS

SSCPs (Security Screening Check Points) – see the TSA Checkpoint Requirements and Planning Guide (CRPG)

STSO (Supervisor Transportation Security Officer) Podium

Transportation Security Manager (TSM) Office

Private Screening Rooms (PSR)

TSA Storage

Known Crew Member (KCM)

CBIS (Checked Baggage Inspection Systems)

CBRA (Checked Baggage Resolution Area)

Over Sized (O/S) Checked Baggage Screening

Lost & Found

Remote Passenger Screening or On Screen Resolution (OSR)

SITES/LOCATIONS

8 OPERATIONAL SPACE TSANet TYPICALS

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

Operational Space TSANet Typicals

STSO (Supervisor Transportation Security Officer) Podium

(2) Dual IT drops (6 cables)

(3) Quad 5‐15R outlets per standard STSO podium

This would support (2) TSANet workstations + (1) Network printer

Transportation Security Manager (TSM) Office

(2) Dual IT drops (4 cables)

(2) Quad 5‐15R outlets

This would support (1) TSANet workstation + (1) Network printer

Private Screening Rooms (PSR)

None (unless identified by local TSA)

TSA Storage

None (unless identified by local TSA)

Known Crew Member (KCM)

(1) Dual IT drop (4 cables)

(1) Quad 5‐15R outlet

This would support (1) KCM computer

The example TSANet requirements below are meant to be used purely as a reference; the final TSANet requirements for operational spaces are dictated by the size and configuration of those spaces and may vary from what is shown here.

Operational Space TSANet Typicals are superseded by the customized set of IT requirements generated for each project by the regional FRM.

CBIS (Checked Baggage Inspection Systems)

CBRA (Checked Baggage Resolution Area)

Over Sized (O/S) Checked Baggage Screening

Lost & Found

Remote Passenger Screening or On Screen Resolution (OSR)

All of the space typicals listed above are usually provisioned with:

(1) Dual IT drop (4 cables)

(1) Quad 5‐15R outlet

This would support (1) Supervisor, TSANet workstation

SITES/LOCATIONS

9 TSANet REQUIREMENTS FOR LEASED SPACE TYPICALS

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSANet Requirements for Leased Space Typicals

TSANet requirements for Leased Space Typicals can be found in the TSA Real Estate Management office POR (Program of Requirement).

The Space Typicals section of the POR outlines the spaces that are common throughout TSA and provides a typical example of each space.

The examples provided are meant to be used purely as a reference, and the final space size and configuration may vary from what is shown.

TSA IT has increased the power receptacle requirements for receptacles supporting IT locations to account for increased IT equipment needs.

For duplex data drops (wall jacks supporting 2 connections); (1) QUAD 5‐15R outlet is required

For quadplex data drops (wall jacks supporting 4 connections); (2) QUAD 5‐15R outlets are required

All IT‐related power receptacles should be within 3' of the associated IT wall drop.

This is a general, “rule‐of‐thumb”, meant to be used as a reference; the final IT‐related power requirements will be outlined in the customized project IT requirements document.

SITES/LOCATIONS

10 TSA LABELING STANDARDS; PAGE 1

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSA Application of TIA/EIA‐606‐A/B/C Labeling Standard

The following guidance applies to low voltage, data cabling (i.e. CAT6 or fiber optic cabling).

Hardware/infrastructure labeling should include:

Faceplates/Wall Plates

Connecting hardware, such as patch panels or IDC blocks in the telecommunications space(s)

Copper and/or fiber cable

Building‐backbone cable

Building‐backbone termination points

Consolidation points or termination points of the cable along the horizontal link, back to the telecommunications space

The telecommunications space(s)

Firestop locations.

TSA has a naming convention for all its IT cabinets/enclosures, and will provide the names for each cabinet.

For examples presented on the CABLE LABELING and EQUIPMENT LABELING pages, we will be using example TSA IT cabinets named:

AAA‐OIT‐AP‐01‐TT‐C

AAA‐OIT‐AP‐03‐TT‐C

The key identifier in the names above is the cabinet number (in red).

This labeling standard supersedes the labeling standards located in the TSA Real Estate Management Division Program of Requirements (POR).

CRPG Labeling standards apply for STIP system (SSCP).

SITES/LOCATIONS

11 TSA LABELING STANDARDS; PAGE 2

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

Cable Labeling Types:

CABLE WRAP, OR WRAP‐AROUND LABEL (DOUBLE OR SINGLE LINE).

Self‐laminating cable wraps are preferred by TSA for all cable labeling.

Labeling Device: Manufacturer labeler is required (i.e.Brady (M210) Dynamo, Brother) that prints in a clear typed (san serif) font.

Hand written cabling identification information is NOT permitted.

Label type: Nylon

Colors: Black letters on white background

No smaller than 8pt. Font

IT CABLINGLOCATION A LOCATION BA > B

NEAR‐END

Near‐End/Far‐End labeling: used for some labeling; see cable labeling 2, 3, 4 & 7.

FAR‐END

B > A

NEAR‐END

FAR‐END

SITES/LOCATIONS

12 CONDUIT LABELING

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

Conduit type: Any of the industry standard conduit types are acceptable, but rigid, metallic conduit is preferred for the physical security of the TSA enterprise network, which is a sensitive but unclassified network.

All non‐leased, TSA only conduit should be:

Labeled every 5 – 10 feet (or less), in a large enough font to make the conduit path easily traceable visually.

Before and after any junction boxes.

CONDUITLOCATION A

LOCATION B

SIT – T591

TSA SITE CODE

TSA DEVICE CODE

[“TSA Site Code”]‐[TSA Site Device Code]

For Example:

SIT – T591

SIT = Sitka Alaska

T591 is the TSA device code for the SIT off‐site

SIT – T591

LABELING:

5' ‐ 10' or less

JUNCTION

BOX

CO

N

DU

IT

SIT – T591

SITES/LOCATIONS

13 MDF RELATED CONTRACTOR LABELING & EQUIPMENT

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

FROM: COPPER PATCH PANEL

TO: ROOM/LOCATION WALL PORT

TSA MDF

Router

Switch

KEY

Single Mode Fiber (LC/LC) CAT6 – admin data (TSANet)

NID

ROOM/LOCATION

WALL PORT

Patch Panel (copper)

Patch Panel (fiber optic)

TSA ISP

FROM: TSA FIBER PATCH PANEL

TO: TSA IDF

FROM: TSA NID

TO: TSA MDF FIBER PATCH PANEL

CABLING FROM/TO

OR

EQUIPMENT

EQUIPMENT PROVIDER /

LABELING RESPONSIBILITY

CTR / NOT LABELED

CTR / LABELED BY PROJECT CTR AT INSTALL

see page titled “CABLE LABELING 3 & 4”

CTR / LABELED BY PROJECT CTR DURING INSTALL

see page titled “CABLE LABELING 1 & 2”

COPPER PATCH PANEL

WALL JACK

FIBER PATCH PANEL CTR / LABELED BY PROJECT CTR AT INSTALL

see page titled “EQUIPMENT LABELING A, B & C”

CTR / LABELED BY PROJECT CTR AT INSTALL

see page titled “EQUIPMENT LABELING A, B & C”

CTR / LABELED BY PROJECT CTR AT INSTALL

see page titled “EQUIPMENT LABELING D, E & F”

4 FROM: SITE DEMARK

TO: TSA ROUTER

CTR / LABELED BY PROJECT CTR AT INSTALL

see page titled “CABLE LABELING 5 & 6”

IT CABINET / RACK CTR / INSTALLED BY CTR

see page titled “EQUIPMENT LABELING A, B & C”B

C

C

F

PROJECT CONTRACTOR IS RESPONSIBLE FOR THE FOLLOWING MDF RELATED EQUIPMENT/LABELING

NID, Router & Switches are TSA provided

SITES/LOCATIONS

14 IDF RELATED CONTRACTOR LABELING & EQUIPMENT

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSA IDF

Router

Switch

KEY

Single Mode Fiber (LC/LC) CAT6 – admin data (TSANet)

NID

ROOM/LOCATION

WALL PORT

Patch Panel (copper)

Patch Panel (fiber optic)

3 FROM: TSA FIBER PATCH PANEL

TO: TSA IDF

FROM: COPPER PATCH PANEL

TO: ROOM/LOCATION WALL PORT

FROM: TSA MDF

TO: TSA IDF

CABLING FROM/TO

OR

EQUIPMENT

CTR / NOT LABELED

CTR / LABELED BY TSA IT AT INSTALL

see page titled “CABLE LABELING 3 & 4”

CTR / LABELED BY PROJECT CTR DURING INSTALL

see page titled “CABLE LABELING 3 & 4”

COPPER PATCH PANEL

WALL JACK

FIBER PATCH PANEL CTR / LABELED BY PROJECT CTR DURING INSTALL

see page titled “EQUIPMENT LABELING A, B & C”

CTR / LABELED BY PROJECT CTR DURING INSTALL

see page titled “EQUIPMENT LABELING A, B & C”

CTR / LABELED BY PROJECT CTR DURING INSTALL

see page titled “EQUIPMENT LABELING D, E & F”

IT CABINET / RACK CTR / INSTALLED BY PROJECT CTR

see page titled “EQUIPMENT LABELING A, B & C”

EQUIPMENT PROVIDER /

LABELING RESPONSIBILITY

B

C

C

F

PROJECT CONTRACTOR IS RESPONSIBLE FOR THE FOLLOWING IDF RELATED EQUIPMENT/LABELING

NID, Router & Switches are TSA provided

SITES/LOCATIONS

15 MDF RELATED TSA LABELING & EQUIPMENT

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSA MDF

Router

Switch

KEY

Single Mode Fiber (LC/LC) CAT6 – admin data (TSANet)

NID

ROOM/LOCATION

WALL PORT

Patch Panel (copper)

Patch Panel (fiber optic)

NID, Router & Switches are TSA provided

FROM: TSA FIBER PATCH PANEL

TO: TSA ROUTER

FROM: TSA ROUTER

TO: TSA SWITCH

FROM: TSA SWITCH

TO: COPPER PATCH PANEL

FROM: TSA ISP

TO: TSA NID

TSA ISP / LABELED BY TSA ISP/TSA IT AT INSTALL

see page titled “CABLE LABELING 1 & 2”

TSA / LABELED BY TSA IT AT INSTALL

see page titled “CABLE LABELING 3 & 4”

TSA ROUTER

TSA SWITCH

NETWORK INTERFACE DEVICE TSA ISP / LABELED BY TSA IT AT INSTALL

see page titled “EQUIPMENT LABELING A, B & C”

CABLING FROM/TO

OR

EQUIPMENT

IT CABINET / RACK *PROVIDED BY CTR / LABELED BY TSA IT

see page titled “EQUIPMENT LABELING A, B & C”

EQUIPMENT PROVIDER /

LABELING RESPONSIBILITY

TSA / LABELED BY TSA IT AT INSTALL

see page titled “EQUIPMENT LABELING D, E & F”

TSA / LABELED BY TSA IT AT INSTALL

see page titled “CABLE LABELING 5 & 6”

TSA / LABELED BY TSA IT AT INSTALL

see page titled “EQUIPMENT LABELING D, E & F”

TSA / LABELED BY TSA IT AT INSTALL

see page titled “CABLE LABELING 7”

A

B

D

E

TSA IT IS RESPONSIBLE FOR THE FOLLOWING MDF RELATED EQUIPMENT/LABELING

TSA ISP

SITES/LOCATIONS

16 IDF RELATED TSA LABELING & EQUIPMENT

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSA MDF

Router

Switch

KEY

Single Mode Fiber (LC/LC) CAT6 – admin data (TSANet)

NID

ROOM/LOCATION

WALL PORT

Patch Panel (copper)

Patch Panel (fiber optic)

NID, Router & Switches are TSA provided

FROM: TSA FIBER PATCH PANEL

TO: TSA ROUTER

FROM: TSA SWITCH

TO: COPPER PATCH PANEL

TSA SWITCH

IT CABINET / RACK

CABLING FROM/TO

OR

EQUIPMENT

MDF

*PROVIDED BY CTR / LABELED BY TSA IT

see page titled “EQUIPMENT LABELING A, B & C”

EQUIPMENT PROVIDER /

LABELING RESPONSIBILITY

TSA / LABELED BY TSA IT AT INSTALL

see page titled “CABLE LABELING 3 & 4”

TSA / LABELED BY TSA IT AT INSTALL

see page titled “EQUIPMENT LABELING D, E & F”

TSA / LABELED BY TSA IT AT INSTALL

see page titled “CABLE LABELING 7”

B

E

TSA IT IS RESPONSIBLE FOR THE FOLLOWING IDF RELATED EQUIPMENT/LABELING

SITES/LOCATIONS

17 CABLE LABELING 1 & 2

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

1 TSA ISP TO NID (fiber or copper)

SMF or COPPERNEAR TSA ISP DEMARK POINT NEAR TSA NID

[“TSA”]:[TSA Site Device Code]

TSA Site Device code T999

2 NID TO PATCH PANEL CONNECTION (fiber or copper) (TSA uses near‐end/far‐end labeling)

[NID location (room)] > [NID connected TSA IT cabinet Identifier]‐[position of top of patch panel in rack units from bottom]:[2‐Digit port #]

[NID connected TSA IT cabinet Identifier]‐[position of top of patch panel in rack units from bottom]:[2‐Digit port #] > [NID location (room)]

SMF or COPPERNEAR NID

NID connects to TSA IT cabinet 01 Patch panel installed at U 30 position

NID to patch panel connection via port 02

NID is in airport room 112

TSA:T999

TSA Site Device code T999

TSA:T999

NID112 > 01‐30:02 01‐30:02 > NID112

NID connects to TSA IT cabinet 01 Patch panel installed at U 30 position

NID to patch panel connection via port 02

NID is in airport room 112

NEAR TSA IT CABINET 01

SITES/LOCATIONS

18 CABLE LABELING 3 & 4

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

SMF

[Near end TSA IT cabinet Identifier]‐[position of top of patch panel in rack units from bottom]:[port #] > [Far end TSA IT cabinet Identifier]‐[position of top of patch panel in rack units from bottom]:[port #]

Far End TSA IT cabinet 03

Far End patch panel in U 36 position Far End SMF connection in port G1

NEAR TSA IT CABINET 01

3 VERTICAL CABLING ‐ (LC/LC CONNECTION)

(TSA uses near‐end/far‐end labeling)

Near End TSA IT cabinet 01 Near End Fiber patch panel in U 30 position

Near End SMF connection in port G2

01‐30:G2 > 03‐36:G1 NEAR TSA IT CABINET 03

Near End TSA IT cabinet 03 Near End patch panel in U 36 position Near End SMF connection in port G1

Far End TSA IT cabinet 01 Far End Fiber patch panel in U 30 position

Far End SMF connection in port G2

03‐36:G1 > 01‐30:G2

SMF

[position of top of patch panel in rack units from bottom]:[port #] > [position of top of patch panel in rack units from bottom]:[port #]

Switch located in U 36 position SMF connected to GBIC in switch port G1

NEAR TSA IT CABINET 01

4 FIBER OPTIC PATCH CABLING ‐ (LC/LC CONNECTION)

(TSA uses near‐end/far‐end labeling)

Near End Fiber patch panel in U 30 position Near End SMF connection in port G2

30:G2 > 36:G1 NEAR TSA IT CABINET 03

Switch located in U 36 position SMF connected to GBIC in switch port G1

Far End Fiber patch panel in U 30 position Far End SMF connection in port G2

36:G1 > 30:G2

SITES/LOCATIONS

19 CABLE LABELING 5 & 6

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

6 COPPER; ROUTER TO SWITCH CONNECTION [“TSA RTR”]; [TSA switch name]

COPPERNEAR ROUTER NEAR TSA CORE SWITCH

5 TSA PRI ‐ DEMARK TO TSA ROUTER ‐ COPPER T1 ANALOG / CAT3 [“TSA PRI”]; [Site Demark location (room)]

SMFDEMARK TSA MDF

TSA PRI

Site demark is in airport room 112

TSA PRI; 112

TSA PRI

Site demark is in airport room 112

TSA PRI; 112

TSA ROUTER

TSA switch named “T999WMA001”

TSA RTR; WMA001

TSA ROUTER

TSA switch named “T999WMA001”

TSA RTR; WMA001

SITES/LOCATIONS

20 CABLE LABELING 7

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

7 COPPER (CAT6) HEAD‐END PATCH CABLING

(TSA uses near‐end/far‐end labeling)

CAT6

Position of top of patch panel in rack units from bottom of the rack]‐[2‐Digit port #] > [Switch number]‐[2‐Digit port #]

[Switch number]‐[2‐Digit port #] > Position of top of patch panel in rack units from bottom of the rack]‐[2‐Digit port #]

PATCH PANEL SWITCH

TSA switch named “T999WMA001”

Patch panel in U 36 position

Port 8 of switch T999WMA001 port 10 (of that patch panel)

36‐10 > WMA001‐08 WMA001‐08 > 36‐10

TSA switch named “T999WMA001”

Patch panel in U 36 position

Port 8 of switch T999WMA001 port 10 (of that patch panel)

SITES/LOCATIONS

21 EQUIPMENT LABELING A, B & C

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

NID

(single line)

IT CABINET / RACK

(single line)

PATCH PANEL (FIBER OR COPPER)

(single line)

A

B

C

Patch Panel Port Identifiers:

[TSA IT cabinet Identifier]‐[patch panel position]

Patch panels are identified by the number of U from the bottom of the rack

Front of the rack is 1 to 48 U, back of the rack is 49 to 96 (for 48 U racks);

smaller racks are handled similarly if the back is useable.

Port 01

Patch Panel installed in U 26 position TSA IT Cabinet 03

[“TSA”]:[TSA Site Device Code]

TSA NID:T999

“TSA NID”

TSA Site Device code T999

TSA IT responsibility; refer to TSA IT Cabinet Naming Convention guidance

‐2

SITES/LOCATIONS

22 EQUIPMENT LABELING D, E & F

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

ROUTER

(single line)

SWITCH

(single line)

ROOM LOCATION WALL PORT

(single line)

D

E

F

Router name is provided by TSA

[TSA Site Device code][WMA###(A)]

T999 WMA002A

TSA designator “WMA” TSA Site Device code T999

For Data faceplates/wall plates

[FF]‐[S]‐[CC]‐[PP]:[PT]

FF = two‐digit floor of location

S = unique space identifier of the work location (i.e. room number)

CC = two‐digit TSA IT cabinet number this cable originates in

PP = position of top of patch panel in rack units from bottom this cable originates in

PT = port on the identified patch panel the cable(s) originate in

02‐215‐01‐35:05

Floor 2 Room 215

TSA IT cabinet 01 Patch panel 35 U

Port 05

Ex: 02‐215‐01‐35:05

On floor 2

Room 215

The cable originates in TSA IT cabinet

AAAOIT‐AP‐01‐TT‐C (cabinet 01)

From patch panel 35 U from the bottom of the rack

In port 5 (numbered top down & left to right)

Switch 2A

SITES/LOCATIONS

23 EQUIPMENT LABELING G

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

POTS FACEPLATES/WALLPLATES

(single line)G

[FF]‐[S]‐[####]

FF = two‐digit floor of location

S = unique space identifier of the work location (i.e. room number)

#### = last 4 digits of POTS line of service (phone number)

02‐215‐1212 Floor 2

Room 215 Last 4 Phone #

Ex: 02‐215‐1212:220‐03

On floor 2

Room 215

The last (4) digits of the phone number is “1212”

SITES/LOCATIONS

24 CABLE MANAGEMENT

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

Cable Management

Straps

Only use network cable approved straps.

Zip ties or twist ties should not be used on network cables.

Straps should be spaced at appropriate distance to ensure cables are held tight together.

Cable Organizers: Vertical and horizontal cable organizers should be used where appropriate to ensure cables are organized in orderly fashion.

Cable Management Arms: Cable management arms are discouraged since they restrict air flow.

Cable flow directions:

Cable flow should be neat and orderly to reflecting industry standards and facilitating troubleshooting.

Cables should be divided in the middle, where half flows to left and half flows to right (Figure 1).

Where applicable, network switch top row cables should go to upper cable management organizer (Figure 2).

Where applicable, network switch bottom row cables go to lower cable management organizer (Figure 2).

Figure 1 Figure 2

SITES/LOCATIONS

25 ELECTRICAL AND HVAC REQUIREMENTS

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

Electrical Additional information on TSA electrical requirements can be found in the TSA CRPG and POR.

Contractor is required to verify calculation and implementation of all electrical circuitry loads as required to comply with all applicable codes.

Electrical outlets should be located within two (2) feet of any data drops.

TSA requests installation of one (1) quad electrical outlet; consisting of four (4), NEMA 5‐15R receptacles installed in a wall mounting box with and appropriate outlet plate; for every dual data drop.

Outlet plates shall be installed flush with the finished surface.

Each workstation requires two (2) 20 Amp circuits; one for computer use and one for utility use. Each computer circuit shall not exceed 4 duplex outlets (4 workstations). Each utility circuit shall not exceed eight (8) duplex outlets.

If the site involves an IT cabinet installation, provide a dedicated 110Volt/20A electrical circuit, mounted inside of the cabinet, utilizing an appropriate receptacle.

HVAC Requirements Additional information on TSA electrical requirements can be found in the TSA CRPG and POR.

The TSA Field Office Program of Requirements (POR) stipulates:

The MDF shall be located with ready access to main HVAC delivery system. In some instances, a separate unit may be required.

HVAC shall be available on a 24 hours‐per‐day, 365 days‐per‐year basis. If the building HVAC system cannot assure continuous operation, provide a stand‐alone HVAC unit. The temperature and humidity shall provide continuous operating ranges of 65 ºF to 80ºF with a 20% to 60% relative humidity.

Humidification and dehumidification equipment may be required depending on local conditions. Measure ambient temperature and humidity at a distance of 1.5m (5 ft.) above floor level, after equipment is operational, and at any point along equipment aisle centerline.

SITES/LOCATIONS

26 REQUIREMENTS KEY

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

(2) 5L‐30

VoIP

ELECTRICAL AND TELECOM SYMBOL KEY

IT drop; # cables indicated, AFF 12" ‐ 18"

IT drop; VoIP wall mount phone; typically AFF 48"

IT drop; KRONOS clock

POTS

Quad 5‐15R

Dual 5‐15R outlets

Dual 5L‐30

IT drop; floor mount (flush); # cables indicated

Quad 5‐15R, floor mount (flush)

(2) IT drop; 2 cables, dual faceplate

(4) IT drop; 4 cables, quad faceplate

(2) IT drop; floor mount (flush); 2 cables, dual faceplate

(4) IT drop; floor mount (flush); 4 cables, quad faceplate

TELECOM OUTLETS POWER OUTLETS

Dual 5‐15R, floor mount (flush)

Dual 5‐15R, ceiling mount

Quad 5‐15R, ceiling mount

TV / Flat Panel wall mount; typically AFF 60"

OTHER

TV

FD

Feed (Data); # cables indicated (cubicle whip)

FP

Feed (Power); # 120 Amp circuits indicated (cubicle whip); TSA standard is (1) 120 amp circuit per (3) cubicles

IT drop; ceiling mount; # cables indicated

TSA Project, custom IT scopes use the following standard symbols for planning.

Fiber Optic Patch Panel

Copper Patch Panel

SITES/LOCATIONS

27 KRONOS CLOCK INSTALLATION

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

TSA requires the construction contractor to provide/ install the cabling and mount the clock (bracket) to the wall in the location(s) identified by TSA.

TSA will provide the equipment.

Equipment: Kronos 9100 Dimensions: see page titled KRONOS 9100 WALL MOUNT Power Requirements: Power Over Ethernet (POE)

IT Requirements:

Data Drop: 2 CAT5e/CAT6 Kronos terminal placement must be within 295' of existing TSA IT cabinet Verify switch capacity exists in supporting TSA IT cabinet prior to installation

Additional Information:

Locate Kronos terminal in a secure TSA area, place in protected area to avoid physical damage.

Mount per ADA requirements. Allowed high side reach shall be no more than 54" AFF, and the allowable low side reach shall be no less than 9"

AFF.

Avoid SSCP high traffic areas such as exit lanes, queueing areas, public seating and recomposure areas.

No exposed cabling is allowed.

TSA preferred install is to mount the clock directly over a LAN port (data drop)

9"

TSA uses KRONOS clocks for timekeeping at most locations. Installation guidance is below, and on the following page.

SITES/LOCATIONS

28 KRONOS 9100 WALL MOUNT

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

Knockout for wall plate NO A/C needed

Power Over Ethernet (POE)

Mounting Screws

NOT TO SCALE DO NOT USE AS A MOUNTING TEMPLATE

SITES/LOCATIONS

29 TSA IT SYSTEMS CONCEPT MAP

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. FergusonTSA Office Spaces

CAT6CAT6

FOC

TSA IT

Cabinet

TSA IT Systems / Services Concept Map

FOC

LMR

TSA Provides:

LMR antenna(s) Repeaters BDA antennas (if required)

LMR

Airport Provides:

Antenna POE Dedicated power Ground bar Cabling (LMR 400 is standard) Fiber (for BDA)

TSA

LMR

REPEATER

LMR

POTS

TSA Provides:

Orders POTS via GSA Contract

GSA Provides:

Delivers service (line) to DEMARC

Airport Provides:

Infrastructure from DEMARC to station end

TSA IT

Cabinet

Physical separation required between

CPSS/ASL & TSA Data

TSA Provides:

Data Circuit DHS OneNet Router Switch(es)

UPS

Airport Provides:

IT Cabinet(s) IT Cabling (vertical and horizontal) Patch panels Cable management Power

Data

STIP / TSE

MDF

Data

Airport or Terminal

DEMARC (MPOE)

Ai rp or t

TS

A G O V

CAT6

ASL/CPSS

CPSS or Airport / ASL Contractor Provided

The CPSS/ASL vendor provides planning requirements

ASL/CPSS

CABINET

SSCP (Checkpoint)

CPSS / ASL

CPSS / ASL

Verizon is responsible for OOB line;

HOWEVER plan for the supporting infrastructure install.

POTS

OOB

BDA

DA

S (if re qu ire d)

D at a ci rc ui t

PR

I

Data circuit

PRI

TSA Net TSA

ISP

Telephone Service

ASL/CPSS

Network

CAT6 Colors by system

ASL

Office Spaces SSCP Equipment/TSE

WorkstationsVoIP

POTS

IDF

This page shows a “notional system” set for TSA field sites. Not all sites will be operating all systems shown.

SITES/LOCATIONS

30 CHANGE SUMMARY

TRANSPORTATION SECURITY

ADMINISTRATION

6595 Springfield Center Drive

Springfield, VA 22150

Version & Date:

v.07 3/22/2024 Drafter:

Brian D. Ferguson

SUMMARY OF CHANGES:

6/14/2023 v.01 Initial publication.

6/30/2023 v.02 Additional labeling detail added. Refined pg 4, security access requirements guidance.

9/14/2023 v.03 Removal of CAT3 labeling requirements; change to POTS FACEPLATES/WALLPLATES labeling guidance 10/27/2023 v.04 Added guidance regarding power outlets for Equipment rooms/MDFs and Telecommunications rooms & enclosures/IDFs.

11/2/2023 v.05 Updated all references to the current POR, 1.03 dated 6/1/2023 11/17/2023 v.06 Simplified portions of the cable labeling guidance.

3/22/2024 v.07 Added CONDUIT LABELING guidance & General IT Guidance for Operational & Leased TSA spaces (space typicals)