SOO-TRP pdf Ss.pdf

1. SOO/TRP for Service Purchases

2. Purpose Annual Maintenance Contract for GeminiSEM 460 equipment

3. Technical Requirements

3.1 Special Asset Tagging

The contractor shall provide special asset tags IAW MIL STD-130, DODI 8320.04, Item Unique Identification (IUID) Standards for Tangible Personal Property and DFARS 252.211-7703, Item Identification and Valuation. The current list of accepted unique item identifier types is maintained at http://www.acq.osd.mil/dpap/pdi/uid/uii_types.html. All DoD recognized unique identification equivalents are listed at http://www.acq.osd.mil/dpap/pdi/uid/iuid_equivalents.html.

3.2 Energy Star Mandate

The contractor shall ensure the product meets Energy Star guidelines.

3.3 IPV6 Mandate

The contractor shall ensure the product meets IPV6 capabilities per UCR 2013 and certified by the DoD UC approved products list.

3.4 Unified Capabilities (UCR) 2013 Mandate

The Contractor shall provide UC approved products. The UC APL is a consolidated list of products that have completed interoperability and information assurance certification and is managed by Defense Information Systems Agency (DISA).

3.5 BIOS Mandate

The contractor shall ensure that all x86 and x64 laptops and desktops be BIOS protection compliant with Section 3.1 “Security Guidelines for System BIOS Implementations of SP 800- 147,” per DoD CIO.

3.6 Trusted Platform Module (TPM) Mandate

In accordance with DoDI 8500.01, computer assets will include a Trusted Platform Module (TPM) version 1.2 or higher. TPMs must be in conformance with Trusted Computing Group standards and ISO/IEC 11889-1:2009 through ISO/IEC 11889-4:2009.

3.7 FIPS 140-2 Encryption Mandate

The contractor shall ensure that all cryptographic products have FIPS 140-1 or 140-2 security certification through the FIPS 140-1 and 140-2 approved products list.

3.8 Common Criteria Evaluation & Validation Scheme

The contractor shall ensure that products used to protect information on National Security Systems are certified by the NIAP/CCEVS approved product list.

http://www.acq.osd.mil/dpap/pdi/uid/uii_types.html http://www.acq.osd.mil/dpap/pdi/uid/iuid_equivalents.html http://energy.gov/eere/femp/covered-product-categories.

http://www.disa.mil/Services/Network-Services/UCCO/%7E/media/Files/DISA/Services/UC-CO/UCR2013/05_Framework_2013.pdf http://www.disa.mil/Services/Network-Services/UCCO http://www.disa.mil/Services/Network-Services/UCCO http://csrc.nist.gov/publications/nistpubs/800-147/NIST-SP800-147-April2011.pdf http://csrc.nist.gov/publications/nistpubs/800-147/NIST-SP800-147-April2011.pdf http://www.trustedcomputinggroup.org/ http://csrc.nist.gov/publications/PubsFIPS.html http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2014.htm http://www.gpo.gov/fdsys/pkg/USCODE-2011-title44/html/USCODE-2011-title44-chap35-subchapIII-sec3542.htm http://www.gpo.gov/fdsys/pkg/USCODE-2011-title44/html/USCODE-2011-title44-chap35-subchapIII-sec3542.htm https://www.niap-ccevs.org/CCEVS_Products/pcl.cfm?tech_name=ALL&CFID=22543646&CFTOKEN=4d4019f9af9ec29e-6DF8BA93-B5B6-A468-778922C860FE86F2

3.9 FIPS 201 Federal Identity Credentialing and Management (FICAM) Mandate The contractor shall ensure that products used to create, print or read smart cards are FIPS 201 compliant and certified by the FICAM approved product list.

3.10 Biometric Mandate

The contractor shall ensure that all biometric products be built to the DoD Electronic Biometric Transmission Specification (EBTS) standard. View the Defense Forensics & Biometrics Agency website for guidance and information. A list of FBI certified products can also be viewed for product specifications and certification.

3.11 High Assurance Internet Protocol Encryptor (HAIPE) Mandate The contractor shall provide IA enabled products that are compliant with the NSA HAIPE program. The contractor shall provide the NSA HAIPE certification from the OEM upon delivery.

3.12 TEMPEST Program Mandates

The contractor shall provide TEMPEST products certified by the NSA TEMPEST approved products list.

3.13 Radio Frequency Identification (RFID) Mandate

The contractor shall provide RFID tagging IAW DoD Radio Frequency Identification Policy, 30 July 2004, or most current version, and DFARS 252.211-7006, Passive Radio Frequency Identification. The contractor shall encode an approved RFID tag using instructions provided in the EPC™ Tag Data Standards in effect at the time of award.

3.14 Section 508 of the Rehabilitation Act Mandate

The Contractor shall meet the requirements of the U.S. Access Board’s regulations at 36 CFR Part 1194 which implements Section 508 of the Rehabilitation Act of 1973, as amended.

4. Ordering Table

Part # Description Qty

GeminiSEM 460 system

Preventative maintenance visit and servicing of the GeminiSEM 460 equipment. 1/year

GeminiSEM 460 system

Equipment and parts needed during a normal annual preventative maintenance visit will be supplied by the contractor. Firmware and software will be updated as required.

1/device

GeminiSEM 460 system

Inspect, repair, and maintain the GeminiSEM 460 system to ensure it operates within system specifications. All repairs will be conducted by qualified personnel.

unlimited

GeminiSEM 460 system

Additional service visits as deemed necessary by service personnel. Breakdowns will be responded to within 3 business day.

unlimited

GeminiSEM 460 system

All servicing, maintenance, and repairs will be conducted on site unless an exemption is granted. All servicing, maintenance, and repairs will be conducted between 8 am – 3 pm, Monday – Friday, excluding Federal holidays, unless an exemption is granted.

N/A

GeminiSEM 460 system

Maintenance and repairs will not degrade or adversely affect present operating capability.

unlimited http://www.idmanagement.gov/approved-products-list https://www.fbibiospecs.org/ebts.html https://www.fbibiospecs.org/ebts.html http://www.biometrics.dod.mil/ http://www.biometrics.dod.mil/ http://www.fbi.gov/about-us/cjis/fingerprints_biometrics/iafis/iafis_cert http://www.nsa.gov/applications/ia/tempest/index.cfm http://www.nsa.gov/applications/ia/tempest/index.cfm https://acc.dau.mil/adl/en-%20S/142796/file/27748/%20RFIDPolicy07-30-2004.pdf https://acc.dau.mil/adl/en-%20S/142796/file/27748/%20RFIDPolicy07-30-2004.pdf http://www.gs1.org/gsmp/kc/epcglobal http://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-section-508-standards/section-508-standards http://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-section-508-standards/section-508-standards http://section508.gov/Section-508-Of-The-Rehabilitation-Act

5. Technical Contractual Requirements

5.1 Technical Refresh

In order to ensure new design enhancements and technological updates or advances, the contractor shall offer, under this DO, hardware and software components available to the contractor's commercial customers. Furthermore, the contractor shall make available any commercially available updates to the hardware and software provided under this DO. If such updates are available to other customers without charge, then they shall also be made available to the Government without additional charge. The contractor will ship these updates to existing customers who have acquired the hardware/software being updated under this DO. Vendor commercial product offerings shall include “state of the art” technology, i.e., the most current proven level of development available in each product category.

5.2 Trade Agreement Act (TAA)

All proposed products must be compliant with the Trade Agreements Act of 1979 (TAA) and related clauses in Section I of this contract. In accordance with DFARS 252.225-7021, the Trade Agreements Certificate at DFARS 252.225-7020 shall be provided for each end item defined and specified in a solicitation that exceeds the TAA threshold subject to the waivers and exceptions provided in FAR 25.4, and DFARS 225.4 offered in response to any RFQ issued under this contract. Please note that Federal Acquisition Regulation (FAR) paragraph 25.103(e) includes an exemption from the Buy American Act (BAA) for acquisition of information technology that is commercial items.

5.3 Authorized Resellers

The contractor may be an authorized reseller of new and refurbished/remanufactured equipment for OEMs proposed under this DO. The contractor may also procure directly from the OEM or utilize other legitimate distribution channels to provide the required products in accordance with the OEM’s policies on reselling. Any contractor’s channel relationships with their OEM partners (gold, silver, etc.) will be represented in the best pricing offered. If the contractor is not an OEM reseller, the contractor shall clearly identify this on the submitted proposal and list the OEM resell partner’s registered relationship with the OEM. DOs may restrict the use of authorized resellers, specific OEMs, or identify required OEMs. The contractor shall ensure all products are genuine and eligible for any OEM warranties, maintenance agreements and licensing as offered. Genuine products are those products the OEM, by their policy, considers not “secondary”, destroyed, stolen or scrapped.

5.4 Remanufactured/Refurbished Products

Any product offering that is remanufactured or refurbished shall be clearly identified as such by the contractor on the submitted proposal. Remanufactured products shall have the OEM or factory certification, if available, for that product. Remanufactured and refurbished products shall be certified according to the standards set forth in the policy of the OEM.

5.5 Items on Backorder

In their response to a Request for Quote (RFQ), the contractor shall provide notification, if applicable, that a particular item is on backorder, the expected lead-time to fulfill the order, etc.

It shall be implicit that a response to an RFQ with no items identified on backorder is a declaration that the items are available at the time of quote submission.

5.6 Warranty

The contractor shall provide any OEM pass through warranty and standard commercial warranties applicable to the products being purchased at no cost. This shall apply to new, refurbished and remanufactured equipment.

5.7 Hardware and Associated Software and Peripherals

All hardware delivered under this DO shall include associated software, documentation and associated peripherals required for operations (such as controllers, connectors, cables, drivers, adapters, etc.) as provided by the OEM. This is true only if the applicable OEM provides such items with the product itself.

5.8 Software

For all software that is outside of hardware and purchased independently, the contractor shall provide the software license registered to the customer’s organization.

5.9 Safeguarding Classified Information

The contractor shall transmit and deliver classified material/reports IAW the National Industrial Security Program Operations Manual (NISPOM) and the National Industrial Security Program Operating Manual (DoD 5220.22-M). These requirements shall be accomplished as specified in the Delivery Order. All Classified Contracts must have at a minimum, the Clause 52.204-2 Security Requirement, incorporated into the contract.

5.10 Installation

The only time that installation services can be procured is when the services and cost are included in the price of the product as sold commercially. In the rare instances where installation services are required/offered, the contractor shall provide installation support related to the applicable products(s) as defined in the DO. In those instances, the DD Form 254

(DEPARTMENT OF DEFENSE CONTRACT SECURITY CLASSIFICATION SPECIFICATION)

requirements will be addressed in the individual DO and only at the security level necessary.

5.11 Customer Support

The prime contractor shall provide 24x7 live telephone support during the warranty period to assist in isolating, identifying, and repairing software and hardware failures, or to act as liaison with the manufacturer in the event that the customer requires assistance in contacting or dealing with the manufacturer.

5.12 Product Maintenance

The contractor shall provide associated maintenance and upgrades to include spares/parts and emergency support worldwide, during the warranty period.

6. Delivery Requirements

6.1 Timeframes

The contractor shall adhere to the following Product Delivery Capability requirements when providing products under this DO. Delivery of products will be to CONUS, OCONUS, and remote locations as identified below. For AOR’s and/or remote sites that do not permit commercial deliveries, the vendor’s delivery capabilities must be in accordance with AFI 24-203, Preparation and Movement of Air Force Cargo, 13 April 2007. Additional delivery terms or schedules, such as ship-in-place, expedited shipping or shipping to APO/FPO addresses, shall be negotiated between the Contractor and the Ordering Contracting Officer (OCO).

Definitions: CONUS: The 48 contiguous states, Alaska, Hawaii, and the District of Columbia.

OCONUS: Germany, Italy, Japan, Korea, Belgium, Turkey, Puerto Rico, United Kingdom, and the Netherlands. Remote OCONUS: those locations that are not listed under CONUS or Named

OCONUS.

The following figure sets forth the maximum performance parameters for deliveries:

Timeframe CONUS OCONUS Remote OCONUS

Routine NLT 30 calendar days NLT 45 calendar days NLT 45 calendar days

Critical NLT 3 calendar days NLT 5 calendar days NLT 10 calendar days

Emergency/War Tempo

Within 24 hours Within 48 hours Within 72 hours

6.2 DO Order Shipping Date

6.3 Delivery Delays

Contractors are required to meet the timeframes as stated in section 7.1 unless Department of Commerce approval and/or review activities prevent the contractor from meeting these timeframes. In the event that the contractor determines they are unable to achieve the stated timeframes, the contractor shall notify the Contracting Officer within two (2) business days of such determination, or immediately upon such determination if operating under the Emergency/War Tempo timelines.