Amendment_0001_Section_28_10_05.pdf

Section 28 10 05 Page 1

SECTION 28 10 05

ELECTRONIC SECURITY SYSTEM (ESS)

PART 1 GENERAL

1.1 REFERENCES

The publications listed below form a part of this specification to the extent referenced. The publications are referred to within the text by the basic designation only.

AMERICAN NATIONAL STANDARDS INSTITUTE (ANSI)

ASC/X9 X9.52 (1998) Triple Data Encryption Algorithm Modes of Operation

ASTM INTERNATIONAL (ASTM)

ASTM A123/A123M (2013) Standard Specification for Zinc (Hot-

Dip Galvanized) Coatings on Iron and Steel Products

ASTM B32 (2008; R 2014) Standard Specification for

Solder Metal

ASTM D709 (2013) Laminated Thermosetting Materials

ASTM E84 (2015b) Standard Test Method for Surface

Burning Characteristics of Building Materials

BUILDERS HARDWARE MANUFACTURERS ASSOCIATION (BHMA)

ANSI/BHMA A156.23 (2010) Electromagnetic Locks

ELECTRONIC COMPONENTS INDUSTRY ASSOCIATION (ECIA)

ECIA EIA/ECA 310-E (2005) Cabinets, Racks, Panels, and

Associated Equipment

INSTITUTE OF ELECTRICAL AND ELECTRONICS ENGINEERS (IEEE)

IEEE 802.3 (2012; ERTA 2013; BK 2013; BJ 2014; BM 2015)

Standard Information Technology-- Telecommunications and Information Exchange Between Systems--Specific Requirements Part 3: CSMA/CD Access Method and Physical Layer Specifications

IEEE C2 (2012; Errata 1 2012; INT 1-4 2012; Errata 2

2013; INT 5-7 2013; INT 8-10 2014; INT 11

2015) National Electrical Safety Code

INTELLIGENCE COMMUNITY STANDARD (ICS)

Section 28 10 05 Page 2

ICS 705-1 (2010) Physical and Technical Security

Standard for Sensitive Compartmented Information Facilities

INTERNATIONAL ORGANIZATION FOR STANDARDIZATION (ISO)

ANSI ISO/IEC 7816 (R 2009) Identification Cards - Integrated

Circuit Cards

NATIONAL ELECTRICAL MANUFACTURERS ASSOCIATION (NEMA)

NEMA 250 (2014) Enclosures for Electrical Equipment

(1000 Volts Maximum)

NEMA ICS 1 (2000; R 2015) Standard for Industrial

Control and Systems: General Requirements

NEMA ICS 2 (2000; R 2005; Errata 2008) Standard for

Controllers, Contactors, and Overload Relays Rated 600 V

NEMA ICS 6 (1993; R 2011) Enclosures

NATIONAL FIRE PROTECTION ASSOCIATION (NFPA)

NFPA 70 (2014; AMD 1 2013; Errata 1 2013; AMD 2 2013;

Errata 2 2013; AMD 3 2014; Errata 3-4 2014;

AMD 4-6 2014) National Electrical Code

NFPA 80 (2013) Fire Doors and Other Opening

Protectives

NFPA 101 (2015) Life Safety Code

NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY (NIST)

NIST FIPS 140-2 (2001) Security Requirements for

Cryptographic Modules

NIST FIPS 197 (2001) Advance Encryption Standard

NIST FIPS 201-2 (2013) Personal Identity Verification (PIV) of Federal Employees and Contractors

OPEN NETWORK VIDEO INTERFACE FORUM (ONVIF)

ONVIF (2015) Core Specification Version 2.6

TELECOMMUNICATIONS INDUSTRY ASSOCIATION (TIA)

TIA-222 (2009g; Add 1 2007; Add 2 2009; R 2012; R

2013; R 2014) Structural Standards for Antenna Supporting Structures and Antennas

Section 28 10 05 Page 3

TIA-568-C.2 (2009; Errata 2010) Balanced Twisted-Pair Telecommunications Cabling and Components Standards

TIA-606 (2012b; Add 1 2015) Administration Standard for the Telecommunications Infrastructure

U.S. DEPARTMENT OF DEFENSE (DOD)

DODI 8500.01 (2014) Cybersecurity

U.S. NATIONAL ARCHIVES AND RECORDS ADMINISTRATION (NARA)

21 CFR 1020 Performance Standards for Ionizing Radiation

Emitting Products

47 CFR 15 Radio Frequency Devices

UNDERWRITERS LABORATORIES (UL)

UL 1037 (1999; Reprint Dec 2009) Safety Antitheft

Alarms and Devices

UL 1076 (1995; Reprint Mar 2015) Proprietary Burglar

Alarm Units and Systems

UL 1610 (1998; Reprint Mar 2015) Standard for

Central-Station Burglar-Alarm Units

UL 294 (2013; Reprint Feb 2015) Access Control

System Units

UL 437 (2013) Key Locks

UL 50 (2007; Reprint Apr 2012) Enclosures for

Electrical Equipment, Non-environmental Considerations

UL 634 (2007; Reprint Mar 2015) Connectors and

Switches for Use with Burglar-Alarm Systems

UL 636 (1996; Reprint Jan 2013) Holdup Alarm Units and Systems

UL 639 (2007; Reprint May 2012) Standard for

Intrusion Detection Units

UL 681 (2014) Installation and Classification of

Burglar and Holdup Alarm Systems

UL 796 (2010; Reprint Sep 2013) Standard for

Printed-Wiring Boards

UL 969 (1995; Reprint Sep 2014) Standard for Marking and Labeling Systems

Section 28 10 05 Page 4

UL 972 (2006; Reprint Dec 2015) Standard for Burglary Resisting Glazing Material Type

1.2 SUBMITTALS

Government approval is required for submittals with a "G" designation;

submittals not having a "G" designation are for Contractor Quality Control approval. When used, a designation following the "G" designation identifies the office that will review the submittal for the Government. Submittals with an "S" are for inclusion in the Sustainability Notebook, in conformance to Section 01 33 29 SUSTAINABILITY REPORTING. Submit the following in accordance with Section 01 33 00 SUBMITTAL PROCEDURES:

1.2.1 The Resident Office, New York District, USMA, West Point, NY will review and will approve submittals requiring special review in this section.

SD-02 Shop Drawings

ESS Components; G

Overall System Schematic; G

SD-03 Product Data

Premise Control Unit; G

Detection Sensors; G

Access Control Unit; G

Access Control Devices; G

Cameras; G

Camera Lenses; G

Camera Housing and Mounts; G

Thermal Imaging System; G

Video Recording; G

Printers; G

Communications Interface Devices; G

Radio Frequency Link; G

Network Switch; G

Video and ESS Transmission; G

Uninterruptible Power Supply (UPS); G

Batteries; G

Component Enclosure; G

Equipment Rack; G

Section 28 10 05 Page 5

SD-05 Design Data

Backup Battery Capacity Calculations; G

Access Control Throughput Rates; G

CCTV Storage Calculations

SD-07 Certificates

Contractor Qualifications; G

Instructor Qualifications; G

Data Encryption; G

SD-10 Operation and Maintenance Data

Training Plan; G

Training Content; G

ESS Components and ESS Software: Data Package 4; G

ESS Software and ESS Components: Data Package 4; G

1.2.2 Submit data package in accordance with Section 01 78 23 OPERATION

AND MAINTENANCE DATA

SD-11 Closeout Submittals

As-Built Drawings; G

1.3 QUALITY ASSURANCE

1.3.1 Regulatory Requirements

The advisory provisions in each of the publications referred to in this specification are mandatory. Interpret these publications as though the word "must" has been substituted for "should" wherever it appears.

Interpret references in these publications to the "authority having jurisdiction," or words of similar meaning, to mean the Contracting Officer.

Equipment, materials, installation, and workmanship must be in accordance with the mandatory and advisory provisions of NFPA 70, and where applicable to NFPA 101 unless more stringent requirements are specified or indicated.

1.3.2 Standard Products

Provide materials and equipment that are products of manufacturers regularly engaged in the production of such products which are of equal material, design and workmanship and:

a. Have been in satisfactory commercial or industrial use for 2 years prior to bid opening, and have been utilized in applications of

Section 28 10 05 Page 6 equipment and materials under similar circumstances and of similar size.

b. Have been available on the commercial market through advertisements, manufacturers' catalogs, or brochures during the 2-year period.

c. Where two or more items of the same class of equipment are required, provide products of a single manufacturer.

d. Provide commercial off-the-shelf (COTS) products in which the manufacturer allows a network of qualified distributors to sell, install, integrate, maintain, and repair the hardware and software products that make up the system.

1.3.2.1 Alternative Qualifications

Products having less than a 2 year field service record will be acceptable if a certified record of satisfactory field operation for not less than 6000 hours, exclusive of the manufacturers' factory or laboratory tests, is furnished.

1.3.2.2 Material and Equipment Manufacturing Date

Products manufactured more than one year prior to date of delivery to the site are not acceptable.

1.3.2.3 Product Safety

System components are to conform to applicable rules and requirements of NFPA 70 and the Underwriters Laboratory (UL) Standards for safety and security. Equip system components with instruction stickers including warnings and cautions describing physical safety, and special or important procedures to be followed in operating and servicing system equipment.

1.3.3 Shop Drawings

1.3.3.1 ESS Components

Submit the ESS Components, Data Package 4 with the ESS Software submittal package in accordance with Section 01 78 23 OPERATION AND MAINTENANCE DATA.

Submit drawings that clearly and completely indicate each ESS component function that includes:

a. Termination device points

b. Interconnections required for system operation

c. Interconnections between modules and devices

d. Proposed wireway or conduit systems to be used including:

(1) Locations

(2) Sizes

(3) Types

Section 28 10 05 Page 7

e. Drawings showing:

(1) Device locations and spacing

(2) Mounting and positioning details

(3) Riser Diagrams with cable sizes and types

(4) Bill of Materials (Device make, model and quantities)

(5) Alarm and access control zones

(6) CCTV and sensor coverage areas

(7) Spare capacity

1.3.3.2 Overall System Schematic

Indicate the relationship of integrated components on one-line diagram and show:

a. Power source

b. System controls

c. Impedance matches

d. Interconnecting wire data including:

(1) Number

(2) Size

(3) Identification

(4) Maximum lengths

1.3.4 Evidence of Experience and Qualifications

1.3.4.1 Contractor Qualifications

Submit experience and certified qualifications data prior to installation.

Show that specific installers who will perform the work have a minimum of 2 years of experience successfully installing ESS of the same type and similar design as specified. Include the names, locations, and points of contact of at least two installations of similar type and design as specified in this document where the installer has installed such systems. Indicate the type of each system installed. Certify that each system has performed satisfactorily in the manner intended for a period of at least 24 months.

1.4 ENVIRONMENTAL CONDITIONS

1.4.1 Interior Conditions

Equipment installed in environmentally protected interior areas must meet performance requirements specified for the following ambient conditions:

Section 28 10 05 Page 8

1.4.1.1 Temperature

32 to 120 degrees F. Components installed in unheated security protected areas must meet performance requirements for temperatures as low as 0 degrees F

1.4.1.2 Pressure

Sea level to 15,000 feet above sea level

1.4.1.3 Relative Humidity

5 to 95 percent

1.4.1.4 Fungus

Components must be constructed of non-fungus nutrient materials or be treated to inhibit fungus growth

1.4.1.5 Acoustical Noise

Components must be suitable for use in high noise areas above 100 dB, without adversely affecting their performance

1.4.2 Exterior Conditions

Components in enclosures must meet performance requirements when exposed to the following ambient conditions:

1.4.2.1 Temperature

Minus 25 to 140 degrees F

1.4.2.2 Pressure

Sea level to 15,000 feet above sea level

1.4.2.3 Solar Radiation

Six hours of solar radiation per day at dry bulb temperature of 120 degrees F including 4 hours of solar radiation at 104 watts per square foot

1.4.2.5 Rain

2 inches per hour and 5 inches per hour cyclic with wind plus one period of 12 inches per hour

1.4.2.6 Humidity

5 to 95 percent

1.4.2.7 Fungus

Warm, humid atmosphere conducive to the growth of heterotropic plants

1.4.2.8 Salt Fog

Salt atmosphere with 5 percent salinity

Section 28 10 05 Page 9

1.4.2.9 Snow

Snow loading of 48 (psf) per hour; blowing snow of 4.6 psf per hour

1.4.2.10 Ice Accretion

Up to 1/2 inches of radial ice

1.4.2.11 Wind

Continual velocity up to 50 mph with gusts to 66 mph, except that fence sensors must detect intrusions up to 35 mph

1.4.2.12 Acoustical Noise

Components must be suitable for use in high noise areas above 110 dB without adversely affecting their performance. Examples areas include flight lines, run-up pads, and generator sites.

1.5 SYSTEM CALCULATIONS AND ANALYSIS

1.5.1 Backup Battery Capacity Calculations

Submit calculations showing that backup battery capacity exceeds sensor operation, communications supervision, and alarm annunciation power requirements for proposed equipment plus 25 percent spare capacity.

1.5.2 CCTV Storage Calculations

N/A

1.6 EXISTING ELECTRONIC SECURITY SYSTEM AND CLOSED CIRCUIT TELEVISION (CCTV)

SYSTEM AND INTEGRATION OF PERSHING BARRACKS SYSTEMS

1.6.1 The Garrison, United States Military Academy, West Point, NY has security system in place.

1.6.1.1 The Government will use Other Government Contractor (OGC) to integrate the CCTV camera sub-system, access control sub-system for the doors, and intrusion detection sensor and devices with the installation-wide security system.

1.6.1.2 Contractor Responsibility: The Pershing Barracks Renovation Contractor shall provide all ESS equipment including wiring, conduit, terminations, testing, calibration and acceptance testing of each subsystem prior to their integration by the OGC with the installation wide ESS.

Contactor shall provide all sensor, control and power wiring, for sensors, locks, devices and door controllers, including wiring and conduits from card reader to the door controller. Contractor to provide power, control and sensor wiring for locking devices, including conduits, junction bokes, and enclosures for electronics components. Contractor shall furnish and install all communication cables and conduits from door controllers to access control system panels, and communication cables and conduit between the ACP and the data communication switch. Contractor shall install conduits and cables from each CCTV Camera to the telecommunication closet and termination at the video switch(es).

Section 28 10 05 Page 10

1.6.1.1 Coordination with Other Sections of Specifications and Drawings:

Contractor shall coordinate the requirements of DIVISION 8, SECTION 08 71 00 with the requirements in the ESS specification. In addition, Contractor shall ensure that all DIVISION 8 requirements related to DOORS and specified in SECTIONS 08 11 13, SECTIONS 08 14 00, and SECTION 08 14 10 with the drawings.

The Contractor shall coordinate with the OGCs for all work related integration of the access control equipment and CCTV subsystem.

1.6.1.1 Applicability of Codes and Standards: Contractor shall ensure that doors and installation of door hardware of Division 8 does not violate the requirements of NFPA 101, NFPA 80, and UL requirements for fire protection.

1.6.1.1 New doors requiring card readers and access control: Contractor shall provide the door manufacturer with templates of Government approved door hardware, for factory templating and milling of doors and door frames.

All doors shall be ready for installation of door hardware either at the factory or site without requiring additional drilling, cutting or boring of doors and door frames for locks, sensors and security devices. Wiring channels in door assemblies from the external power sources shall be installed in the doors and frames as a part of the door manufacturing process.

1.7 ESS SOFTWARE, DATA PACKAGE 4

All ESS software shall be provided and installed by Other Government Contractor responsible for the integration of the CCTV subsystem and access control system for the building and all its controlled doors.

1.8 AS-BUILT DRAWINGS

Maintain a separate set of drawings, elementary diagrams, and wiring diagrams of the system to be used for as-built drawings. Keep this set accurately and neatly up-to-date with all changes and additions. This set is not to be used for installation purposes.

Finish the final drawings submitted with the endurance test report in accordance with Section 01 78 00 CLOSEOUT SUBMITTALS for as-built requirements.

PART 2 PRODUCTS

2.1 SYSTEM DESCRIPTION

The Contractor shall provide all door controllers, ESS components, hardware and infrastructure for integrating the access control system and CCTV system with the existing ESS and CCTV System. This includes door controllers, card readers, conduit, wiring, cables, junction boxes, and devices shown on the drawings. OGC will integrate the CCTV cameras and card readers with their respective door controllers with the ESS. ESS consisting of the following subsystems and features:

a. Intrusion Detection System (IDS)

b. Access Control System (ACS)

c. Closed-circuit Television System (CCTV)

Section 28 10 05 Page 11

d. Security Command Center (SCC)

e. Communications System

f. Security Lighting Systems

2.1.1 Include materials not normally furnished by the manufacturer with the ESS equipment as specified in:

a. Section 33 71 02 UNDERGROUND ELECTRICAL DISTRIBUTION

b. Section 33 71 01 OVERHEAD TRANSMISSION AND DISTRIBUTION

c. Section 26 20 00 INTERIOR DISTRIBUTION SYSTEM

2.2 PERFORMANCE REQUIREMENTS

OGC will integrate the installed and operating subsystems of CCTV and access control system with the Garrison wide ESS system to detect intrusion, control access, provide CCTV surveillance, provide visual verification, and perform as an entity. Contractor shall provide electronic equipment that complies with 47 CFR 15 and are suitable for the environment where they will be installed.

2.2.1 Growth Capability

Cabling infrastructure shall provide capability for modular ESS expansion of inputs, outputs, card readers, and CCTV cameras with minimal equipment modification. Growth capability is not to be limited by the provided products.

2.2.2 Hazardous Locations

When located in areas where fire or explosion hazards exist, provide system components rated and installed according to Chapter 5 of NFPA 70.

2.2.3 Network Certification

OGC is responsible for all certifications to comply with appropriate Platform Information Technology (PIT) in accordance with DODI 8500.01 and the service implementation policy of the Garrison.

2.2.4 Maintainability

Provide components that can be maintained using commercially available tools and equipment. Arrange and assemble components to be readily accessible to maintenance personnel without compromising system defeat resistance and with no degradation in tamper protection, structural integrity, EMI or RFI attenuation, or line supervision after maintenance when it is performed in accordance with manufacturer's instructions.

2.2.5 Availability

Provide components rated for continuous operation. Provide solid-state electronic components mounted on printed circuit boards, conforming to UL

796. Provide boards that are plug-in, quick-disconnect type and provide boards that do not impede maintenance with densely packed circuitry.

Provide power-dissipating components with safety margins of not less than 25

Section 28 10 05 Page 12 percent with respect to dissipation ratings, maximum voltages, and current-carrying capacity. Provide solid-state type or hermetically sealed electromechanical type light duty relays and similar switching devices.

2.2.6 Fail-Safe Capability

Provide fail-safe capability in critical elements of the ESS including, but not be limited to, the capability to monitor communication link integrity and to provide self-test. Provide fault annunciation when diminished functional capabilities are detected. Annunciate fail-safe alarms to clearly distinguish from other types of alarms.

2.2.7 Line Supervision

Provide the same geographic resolution for fault isolation at the systems level as provided for intrusion detection. Provide either a static or dynamic system with active mode for line supervision of communication links of the ESS.

a. The static system must represent "no-alarm" always by the same signal, which is different than the originally transmitted signal.

b. The dynamic system must represent "no-alarm" with a signal which continually changes with time.

2.2.8 Power Loss Detection

Detect AC and DC power loss and generate an alarm when a critical component of the system experiences temporary or permanent loss of power. Annunciate the alarm in the Security Command Center to clearly identify the component experiencing power loss.

2.2.9 Controls and Designations

Provide controls and designations as specified in NEMA ICS 1.

2.2.10 Special Test Equipment

No special test equipment is required.

2.2.11 Electromagnetic Interference (EMI)

Configure and provide ESS components employing electromagnetic radiation constructed to provide minimal vulnerability to electronic countermeasures.

2.2.12 Electromagnetic Radiation (EMR)

N/A

2.2.13 Interchangeability

Use off-the-shelf components which are physically, electrically, and functionally interchangeable with equivalent components as complete items.

Equivalent, replacement components must not require new or other component modification. Do not use custom designed or one-of-a-kind items.

Interchangeable components or modules must not require trial and error

Section 28 10 05 Page 13 matching in order to meet integrated system requirements, system accuracy, or restore complete system functionality.

2.3 INTRUSION DETECTION SYSTEM (IDS)

IDS sensors and devices for this project are needed only for detection of tampering with CCTV cameras, and enclosures housing card readers, and ESS components for access control system.

2.3.1 Video Motion Sensor (Exterior)

Provide a video motion sensor to detect changes in the video signal within a user defined detection zone as described in paragraph VIDEO ANALYTICS. The system must detect changes in the video signal corresponding to a standard intruder moving within the defined detection zone and wearing clothing with a reflectivity that differs from that of the background scene by a factor of

2. Provide signal processing techniques to eliminate non-alarm background motion including light changes, trees blowing, and birds. Provide sensor with controls and method needed by the operator to define and adjust the sensor detection zone within the video picture.

Video motion sensor system must operate using digital cameras. The number of detection zones, the size of the detection zones, and the sensitivity of the detection zones are to be user definable. Provide sensors that accommodate multiple video inputs and have the capability of modular growth.

The video inputs must accept composite video. The sensor must not require external sync for operation. Provide one alarm output for each video input.

Provide number of video inputs and alarm outputs as required for an operable system. Rack-mount sensor equipment in a standard rack as described in paragraph EQUIPMENT RACK with hardware includes as required to mount the sensor components.

2.3.2 Tamper Switches

a. Corrosion-resistant tamper switches are required for the following IDS and CCTV equipment with hinged doors or removable covers that contain open circuits:

(1) Enclosures

(2) Cabinets

(3) Housings

(4) Boxes

(5) Raceways

(6) Fittings

(7) Sensors

b. Tamper switches are to initiate an alarm signal when the door or cover is moved as little as 1/4 inch from the normally closed position.

Mechanically mount tamper switches to maximize defeat time when enclosure covers are opened or removed. One second is the minimum amount of time required to depress or defeat the tamper switch after

Section 28 10 05 Page 14 opening or removing the cover. Enclosure and tamper switch must prevent direct line of sight to internal components and prevent switch or circuit tampering. Conceal mounting hardware so switch cannot be observed from enclosure exterior.

c. Tamper switches on doors which are opened to make normal maintenance adjustments to the system and to service power supplies must have a maintenance position.

2.3.2.1 Tamper Switch Performance Requirements

Tamper switches are to be:

a. Inaccessible until switch is activated.

b. Under electrical supervision at all times, irrespective of the protection mode in which the circuit is operating.

c. Annunciated to be clearly distinguishable from intrusion detection alarms and exempt from being disarmed, shunted, or silenced.

d. Spring-loaded and held in the closed position by the door, or cover protected.

e. Wired to break the circuit when the door or cover is disturbed.

f. Wired so that each sensor and device is annunciated individually at the central reporting processor.

2.4 ACCESS CONTROL SYSTEM (ACS)

Contractor shall provide access control system card readers and door controllers compatible with Hirsch Identive CR-SCM-CCLK based card readers and HIRSCH Mx Controllers. These modular and distributed microprocessor architecture controllers and readers for access control are compatible with the access control system in operation at USMA. ACS components integration with the existing ACS shall be by OGC.

2.4.1 All work and integration related activities at the ESS Console level shall be by OGC, which includes:

a. The ACS card credentials, which are required to be Common Access Cards

(CAC), and CAC cards are being provided by the Government. OGC shall interface this facility’s ACS with and provide alarm and other status to the overall ESS.

b. System is to grant or deny access or exit based upon:

(1) Keypad identification data

(2) CAC card identification data

(3) Video

(4) Biometric reader identification data

(5) Smart card identification data

Section 28 10 05 Page 15

(6) Identification technologies combination

(7) Input through the access control devices compared to data stored within the system

(8) Time of day, day of week, special day, and holiday scheduling with card validation override.

c. Decision to grant or deny access or exit is to be based upon authorization for such data to be input at a specific location for the current time period.

d. Provide ACS that supports the configuration and simultaneous monitoring of multiple access control devices when TCP/IP communication interfaces are used between the ESS and the primary Access Control Unit (ACU).

The events of the ACS are to be viewable as separate or as a combined list of all ESS events. Provide overall control of the ACS, alarm monitoring, and photo identification through software control of the

ESS.

e. Access control, photo imaging, and programming data must reside on a single database and instantly accessible to every networked PC workstation connected to the ESS.

f. Provide both supervised and non-supervised alarm point monitoring.

g. Provide the capability to arm or disarm alarm points both manually and automatically by time of day, day of week or by operator command and the capability to disarm alarm points based on a valid access event.

h. Provide programmable 'delay' setting for all alarm points. The alarm points are not to report an ENTRY type alarm until the delay setting has expired and not report a dwell type alarm condition until the alarm has been active for the full delay period.

i. Provide the capability to place ACU(s) in an off-line mode. In the off-line mode, the ACU(s) must retain a historical summary of all ACU activity transactions, up to the maximum capacity of the ACU memory buffer. Provide the ability for manual operator control of system output relays with the manual functions to energize, de-energize, enable or disable.

j. Provide the ability to display a stored 'video image' of the cardholder based on card activity, and switch real-time CCTV camera to the card reader location for specific card usage. The card reader must not activate the door lock until positive operator acknowledgment from the

SCC.

2.4.2 ACS Programming is by OGC, and OGC shall:

Provide software capable of, but not limited to, the following programming:

2.4.2.1 Time Schedules

Provide up to 256 user-definable time schedules. These time schedules are to determine the day(s) and times that access will be granted or a scheduled event is to occur. Any and all of the time schedules are to be available

Section 28 10 05 Page 16 for defining access privileges and scheduled events. Provide ALWAYS and NEVER schedules that cannot be altered or removed from the system. Each user-defined time schedule must have the option of reacting or not reacting to user-defined special days, with the ability to react uniquely to each type of special day.

2.4.2.2 Special Days

Provide an unlimited number of user definable special days to be used for configuring exceptions to the normal operating rules, typically for specifying holiday operating rules. Allow for each special day to be assigned to a user-defined type.

2.4.2.3 ACU Daylight Savings Time Adjustment

Provide a software-configurable, user defined adjustment for Daylight Savings Time. The ACU must not need to be connected to a PC workstation in order for the adjustment to occur.

2.4.2.4 Scheduled Events

Any access controlled reader is to be capable of scheduled unlock periods to allow for card-free access. The access controlled reader is to also be capable of requiring one valid access event before beginning a scheduled unlock period.

Any access control point is to be capable of requiring a valid card as well as a PIN code via keypad on a scheduled basis for high security areas. The use of PIN via keypad functions must not reduce the number of card readers or alarm points available in the ACU(s). Any designated alarm input must be able to be scheduled Secured and Accessed. Any relay output must be capable of scheduled ON and OFF periods to allow for automatic input and output system control.

2.4.2.5 Maximum User Capability

Up to 64,000 individual users may be given access cards or codes and have their access controlled and recorded.

2.4.2.6 Access Groups

Each system user must be assignable to a maximum of 256 possible access groups. An access group is defined as one or more people who are allowed access to the same areas at the same days and time periods.

2.4.2.7 Active and Expire Dates

Any card or user may be configured with activation and expiration dates.

The card can be assigned to any valid access group and will be activated and expired according to the specified dates.

2.4.2.8 Maximum Use Settings

Any card or user may be configured with maximum number of uses for that card. The card can be assigned to any valid access group and will be expired according to the specified number of card uses.

Section 28 10 05 Page 17

2.4.2.9 Door Outputs

Provide each access control reader with one dedicated relay outputs. Both relays are to provide Normally Open and Normally Closed contacts. Use the first relay for electric lock control while the second is software configurable to activate for door forced open, door left open too long, duress, passback violations, invalid access attempts and valid unlock conditions. Allow for both relays to be separately programmable for energize times from 2 second to 5 minutes. The second relay must allow a delay time to be specified, causing its activation to be delayed after an activating condition occurs.

2.4.2.10 Anti-Passback

Provide global anti-passback capability. Any door on the system can be linked to one of 256 user defined passback areas or two 2 to 4 pre-defined areas. Each door may be set up to automatically forgive passback entries at one of the following intervals:

(1) Never

(2) Midnight

(3) Every 12 hours (Midnight and Noon)

(4) Every 6 hours

(5) Every 2 hours

(6) Each hour

(7) Every 30 minutes

Each door can be configured to deny or grant access for passback violations and individual users can be exempt to the passback rules. The anti-passback features must be a global function and operate completely independent of the ACS software, except configuring the passback rules. Additionally, the operator is to have the ability to manually forgive an individual user or all users by command from the ACS.

2.4.2.13 Crisis Mode

Provide support for a "crisis mode", in which user-selected alarm point activations cause changes to user access privileges. The changes to user access privileges must be configurable to restrict normal access to no access or limited access.

2.4.2.14 Door Groups

Allow up to 256 door groups to be configured. Doors belonging to the same group are be able to be locked, unlocked, disabled, and enabled on command from the ACS.

2.4.2.15 Door Interlocking

Allow a group of doors to be software configured so that if any door in the group is unsecure, all other doors are automatically disabled. This feature

Section 28 10 05 Page 18 is also known as a "mantrap" configuration. The interlocking features must not require the ACS to be on-line for proper operation.

2.4.2.16 PIN Required

Provide support for the required use of a keypad code, in addition to a valid credential during user-selected schedules.

2.4.2.17 Remote Door Control

Provide the ESS operator the capability of manually controlling any access point by issuing a simple command from the ACS. Provide the operator the ability to lock, unlock, enable, and disable any door or Door Group in this manner. This activity is to cause an entry to be logged displaying the door name, number and time that it was performed.

2.4.2.18 Key Control

When interfaced with an approved key-control system, the system is to allow users to deny access to certain doors for any users who have keys in their possession.

2.4.2.19 Reader Disable

Provide support for disabling readers in reaction to a user-selected number of invalid access attempts. Locate a camera to view the card reader and interface to record the events of invalid access attempts.

2.4.2.20 Disable Event Messages

Allow users to disable user-selected event messages (Door Forced Open, Door Open Too Long, Door Closed, Request to Exit) for user-selected doors. Allow users to disable certain messages (Door Forced Open, Door Open Too Long) according to a user-selected schedule.

2.4.2.21 Input and Output Groups

Allow for up to 256 user-defined (input and output) groups to be defined.

Each Input device is to be able to be linked to these groups for arming, disarming, shunting and unshunting as well as output control.

2.4.2.23 Delays

Each alarm device must allow a delay to be specified which is either an entry type or a dwell type. An entry-type delay is to prevent the input from issuing an alarm event until the delay elapses. If unarmed during the delay period, the alarm is to be ignored. A dwell-type delay requires the input to remain in the alarm state for the full delay duration before issuing an alarm.

2.4.2.24 Remote Input Control

Provide the operator the capability of manually controlling any alarm, input point, alarm partition or group by issuing a simple command from the SCC on the ACS allowing the ability to shunt, unshunt, disable and restore any input in this manner. This activity must cause an entry to be logged displaying the input name and time that it was performed. The arm and disarm, shunt and unshunt any alarm partition or group from the SCC must not be permissible in ICS 705-1 applications.

Section 28 10 05 Page 19

2.4.2.25 Output Configuration

Allow each output relay to be software configurable as:

(1) Follows

(2) Latch

(3) Timeout

(4) Scheduled

(5) Timeout Re-triggerable

(6) Limit

(7) Counter

Allow for a time schedule to automatically control the activation and de-activation of the Scheduled type with all other types configured to activate based on input and output group conditions. Additionally, a time schedule must be specified to configure when the output is to actively monitor the input and output groups.

2.4.2.26 Remote Output Control

Provide the operator the capability of manually controlling any output point by issuing a simple command from the SCC. Based upon the output type, provide the ESS operator the ability to ENABLE, DISABLE, turn ON and turn OFF any output in this manner. A FOLLOWS type output must not be capable of being turned OFF or ON. Log an entry when this activity is performed displaying the output name and time performed. Manual control of outputs are not permissible in ICS 705-1 applications.

2.4.2.27 Remote Reset Command

Provide the capability for any ACU to reset manually or by command issued from the ACS with the option of simulating the ACU reset settings, or forcing a reset type as specified by the user. The remote reset command is not to cause the ACU to degrade its level of protection to any access points defined.

2.4.2.28 Time Zone

Allow the user to select the time zone in which the ACU is located, so that event times displayed for that ACU will match the local time where the ACU is located.

2.4.2.29 User-Selected LED Behavior

Allow the user to select different behaviors for the LEDs of each access controlled reader.

2.4.2.30 Traced Cards

Section 28 10 05 Page 20

Provide the capability of selecting any number of cardholders for the purpose of limiting reports to only traced users displaying all traced cardholder events in a user-selected alternate color.

2.4.2.31 Badge Print Tracking

Support setting a print limit for any badge. The software will track the number of times any badge has been printed, as well as display the date and time of the most recent printing.

2.4.3 Error and Throughput Rates

Rates must be portal to portal performance averages obtained when processing individuals one at a time. Features are not to reduce capability to meet throughput requirements when serial verification techniques or multiple attempts are required to satisfy error performance requirements.

A Type I error denies access to an authorized enrolled individual. A Type II error grants access to an unauthorized individual. Subsystem Type I and Type II error rates must both be less than 0.2 percent. At the error rates, subsystem access throughput rate must be minimum of 10 individuals per minute through one card reader and keypad access control device.

2.4.4 Access Control System Central Processing

Not required for this project.

2.4.5 Access Control Unit(ACU)

Each door controller shall be HIRSCH Mx – IDENTIVE panel with capability to receive inputs and outputs of eight (8) or four (4) card readers. OGC shall configure all field ACU panels to intercommunicate with the ESS panels or console. All field ACU(s) shall be equipped with a tamper contact.

Provide ACU capable of, but not limited to, the following:

a. Built-in surge suppression circuitry on plug-in modular circuit boards with surge suppression, configured as an integral component of the system and self-sacrificing in the event of extreme surges or spikes.

b. Capable of supporting at least 2 ports and be expandable in increments of two ports up to a maximum of 8 ports per ACU.

c. Each port configured by ACS to support any one of the following peripheral devices:

(1) Card reader

(2) Alarm Monitoring Module

(3) Output Relay Module

(4) Elevator Reader

(5) Elevator Output Module

Any device combination can be supported on each ACU, up to a total of 8 devices per ACU.

Section 28 10 05 Page 21

d. Capability of supporting multiple card reader technologies simultaneously, including:

(1) Keypad

(2) Card and Keypad

(3) PIV and CAC compatible

(4) Biometrics

This capability must be an integral part of the ACU and will not require special external equipment.

e. Built-in battery back-up of programmed information sustainable for a period of at least 90 days.

f. Powered by a 12 and 24 VDC power source rated at a minimum of 5 amperes with a battery back-up for complete system operation in the event of power failure. Provide battery backup for all ACU(s) to sufficiently power the ACU for 8 hours continuous service.

g. Electric strikes, other locking devices and ancillary peripherals on a separate power supply with battery back-up for continued operation in the event of power failure as specified in paragraph "Backup Power".

h. A minimum of a 10,300 event log buffer per ACU to record and hold access and alarm activity information until the ACS is connected and receives the information. Provide a software-configurable warning log buffer filling notification for ACU(s) configured with network switch capabilities.

2.4.6 Access Control Devices

The card, card reader, and panels must meet encryption requirements that are specified in paragraph DATA ENCRYPTION. Devices are to be tamper alarmed, tamper and vandal resistant, and solid state, containing no electronics which could compromise the access control subsystem should the subsystem be attacked.

2.4.6.1 Card Readers

Provide surface or semi flush as shown on the drawings. For outdoor locations weatherproof mountable card readers as indicated for each individual location as indicated in the drawings. Provide contact type card readers capable of reading CAC, PIV and Keypad; and capable to read CAC and PIV type of access control cards.

Keypads must contain an alphanumeric and special symbols keyboard with symbols scramble type. Provide keypad as an integrated component of the card reader.

2.4.6.1.1 Contact Card Readers

Provide contact card readers that can read credential PIV and CAC cards whose characteristics of size and technology meet those defined by ANSI ISO/IEC 7816 and are in compliance with NIST FIPS 201-2.

Section 28 10 05 Page 22

Provide readers with "flash" download capability to accommodate card format changes and the capability of reading the card data and transmitting the data, or a portion thereof, to the ESS control panel.

2.4.6.1.2 Contactless Card Readers

Provide contactless card readers that can read credential CAC cards whose characteristics of size and technology meet those defined by ANSI ISO/IEC 7816 in close proximity to the card reader and are in compliance with NIST

FIPS 201-2.

Provide readers with "flash" download capability to accommodate card format changes and the capability of reading the card data and transmitting the data, or a portion thereof, to the ESS control panel.

2.4.6.1.3 Card Reader Display

Provide card readers with an LED or other visual indicator display which indicate power ON and OFF and whether user passage requests have been accepted or rejected.

2.4.6.1.4 Card Reader Response Time

The card reader is to respond to passage requests by generating a signal to the local processor.

2.4.6.1.5 Card Reader Power

Power the card reader from the source as shown on the drawings. The card reader must not dissipate more than 5 Watts.

2.4.6.1.6 Card Reader Mounting Method

Provide card readers suitable for surface or semi-flush as required, exterior readers has be in weatherproof mounting enclosures, as required.

2.4.6.2 Keypads

Entry control keypads are to use unique alphanumeric and other symbol combinations as an identifier. Keypads must contain an integral alphanumeric and special symbols keyboard with symbols arranged in random scrambled order. Communications protocol is to be compatible with the local processor.

2.4.6.2.1 Keypad Display

Keypads are to include an LED or other type of visual indicator display and provide visual and audible status indications indicating power ON and OFF and whether user passage requests have been accepted or rejected.

The maxiumum horizontal and vertical viewing angles are to be limited by the keypad display or enclosure. The maximum horizontal viewing angle must be no more than plus and minus 5 degrees off a vertical plane perpendicular to the plane of the face of the keypad display. The maximum vertical viewing angle must be no more than plus and minus 15 degrees off a horizontal plane perpendicular to the plane of the face of the keypad display.

Section 28 10 05 Page 23

2.4.6.2.2 Keypad Response Time

The keypad is to respond to passage requests by generating a signal to the local processor.

2.4.6.2.3 Keypad Power

Power the keypad from the source as shown on the drawings. The keypad must not dissipate more than 5 Watts.

2.4.6.2.4 Keypad Mounting Method

Provide keypads suitable for surface or semi-flush, pedestal mounting shall be permitted only in locations where specific requirements are shown on the drawings. All exterior card readers shall be in weatherproof mounting as required.

2.4.6.2.5 Keypad Duress Codes

Provide a means for users to indicate a duress situation by entering a special code into the keypad.

2.4.6.3 Card Readers with Integral Keypad

Equip contact and contactless card readers with integral keypads as specified in paragraph "Keypads".

Credential cards must allow adding at least one slot or hole for a clip affixing the credential card to the type badge holder used at the site.

2.4.6.4 Warranty

Include a minimum 3-year warranty.

2.4.6.5 Portal Control Devices

Portal control devices must meet the requirements in SECTION 08 71 00 DOOR

HARDWARE.

2.4.6.5.1 Push-Button Switches

a. Provide momentary contact, back lit push buttons and stainless steel switch enclosures for each push button. Provide switch enclosures suitable for [flush] [surface] mounting as required and push buttons suitable for flush mount in the switch enclosures. The push button switches are to meet the requirements of NEMA 250 for the area in which they are to be installed.

b. Where multiple pushbuttons are housed within a single switch enclosure stack vertically with each push button switch labeled with 1/4 inch high text and symbols. The push button switches are to be connected to the local processor associated with the portal to which they are applied and operate the appropriate electric strike, electric bolt or other facility release device.

c. The continuous current of the IDS circuit is to be no more than 50% of the continuous current rating of the device supplied. Provide push button switches with double-break silver contacts that will make 720 VA at 60 amperes and break 720 VA at 10 amperes.

Section 28 10 05 Page 24

2.4.6.5.2 Panic Bar

Include panic bar emergency exit hardware on emergency exit doors as indicated. Provide an alarm shunt signal from the panic bar emergency exit hardware to the appropriate local processor. Provide panic bar compatible with mortise and rim-mount door hardware and operate by retracting the bolt.

2.4.6.5.2.1 Emergency Egress with Alarm

Include a conspicuous warning sign with 1 inch high, red lettering notifying personnel that an alarm will be annunciated if the panic bar is operated.

Panic bar hardware operation is to generate an intrusion alarm. The panic bar must depend upon a mechanical connection only and not depend upon electric power for operation, except for local alarm annunciation and alarm communications.

2.4.6.5.2.2 Normal Egress

Panic bar hardware operation is not to generate an intrusion alarm. The panic bar must depend upon a mechanical connection only when exiting.

Provide the exterior, non-secure side of the door with an electrified thumb latch or lever to provide access after the credential I.D. authentication by the ESS.

Signal Switches: Strikes/bolts are to include signal switches indicating to the system when the bolt is not engaged or the strike mechanism is unlocked.

The signal switches are to report a forced entry to the system.

2.4.6.5.2.3 Delay Egress With Alarm

Include a conspicuous warning sign with 1 inch high, red lettering notifying personnel that an alarm will be annunciated if the panic bar is operated.

Delay operation 10 seconds after initiation for portal control devices.

2.4.6.5.3 Electric Door Strikes and Bolts

Configure electric door strikes and bolts to [release automatically] [remain secure] in case of power failure using DC power to energize the solenoids.

Incorporate end-of-line resistors to facilitate line supervision by the system. Install metal-oxide varistors (MOVs) to protect the controller from reverse current surges if not incorporated into the electric strike or local controller. Electric strikes must have a minimum forcing strength of 2300 pounds.

2.4.6.5.3.1 Solenoid

The actuating solenoid for the strikes and bolts furnished must not dissipate more than 12 Watts and operate on 24 VDC. The inrush current must not exceed 1 ampere and the holding current must not be greater than 500 milli-amperes. The actuating solenoid must move from the fully secure to fully open positions in not more than 500 milliseconds.

Section 28 10 05 Page 25

2.4.6.5.3.2 Signal Switches

Strikes and bolts are to include signal switches indicating to the system when the bolt is not engaged or the strike mechanism is unlocked. The signal switches are to report a forced entry to the system.

2.4.6.5.3.3 Tamper Resistance

The electric strike and bolt mechanism is to be encased in hardened guard barriers to deter forced entry.

2.4.6.5.3.4 Size and Weight

Electric strikes and bolts are to be compatible with standard door frame preparations.

2.4.6.5.3.5 Mounting Method

Provide electric strikes and bolts suitable for use with single and double door installations, with mortise or rim-type hardware as indicated, and compatible with right or left hand mounting.

2.4.6.5.3.6 Astragals

See Section 08 71 00 DOOR HARDWARE for Astragal lock guards.

2.4.6.5.4 Electrified Mortise Lock

Configure electrified mortise locks to either release automatically or to remain secure in case of power failure using DC power to energize the solenoids based on the fire protection and security policy at the installation. Provide solenoids rated for continuous duty. Incorporate end-of-line resistors to facilitate line supervision by the system. Install metal-oxide varistors (MOVs) to protect the controller from reverse current surges if not incorporated into the electric strike or local controller.

2.4.6.5.4.1 Solenoid

The actuating solenoid for the mortise locks furnished must not dissipate more than 12 Watts and operate on 24 VDC. The inrush current must not exceed 1 ampere and the holding current must not be greater than 500 milli-amperes. The actuating solenoid must move from the fully secure to fully open positions in not more than 500 milliseconds.

2.4.6.5.4.2 Signal Switches

The mortise locks are to include signal switches indicating to the system when the locks are not engaged. The signal switches are to report a forced entry to the system.

2.4.6.5.4.3 Hinge

Provide an electric transfer hinge with each mortise lock in order to get power and monitoring signals from the lockset to the door frame.

Section 28 10 05 Page 26

2.4.6.5.4.4 Size and Weight

Electrified mortise locks are to be compatible with standard door preparations. Refer to Division 8, SECTION 08 71 00.

2.4.6.5.4.5 Mounting Method

Provide electrified mortise locks suitable for use with single and double door installations. The lock would be in the active leaf and the fixed leaf would be monitored in double door installations.

2.4.6.5.5 Electromagnetic Lock

Electromagnetic locks are to contain no moving parts and depend solely upon electromagnetism to secure a portal…