Sources Sought/ Notice of Intent to Sole Source for Alerton DDC Server Upgrade

The National Institute of Standards and Technology (Department of Commerce) intends to sole source an Alerton DDC Server Upgrade to Albireo Energy LLC, with responses to this combined sources sought and notice of intent due by August 7, 2026.

Work is performed at NIST Gaithersburg Campus, specifically Building 225. The contractor must supply, install, configure, and maintain Alerton Compass 2 software with associated licenses, re-install custom job files and graphics from existing system backups, perform programming labor to consolidate existing databases under a single Compass 2 system, and install one rack-mounted Dell PowerEdge R760 server. The server configuration specifies an Intel Xeon Silver 4410Y processor with 32GB DDR5 memory, dual Broadcom PERC H965i controllers managing two 1.92TB SATA SSDs and two 7.68TB NVMe drives, dual redundant 1400W power supplies, Windows Server 2025 Standard operating system, iDRAC9 Enterprise 16G systems management, TPM 2.0, and three years of ProSupport Next Business Day Onsite Service.

Period of performance is one year following contract signature. Work occurs during normal business hours (7:00 AM to 5:00 PM, Monday through Friday, excluding weekends and federal holidays); 24/7 emergency services are available. The contractor must provide comprehensive maintenance and support including data backup, graphics revisions, programming and field panel diagnostics, control loop evaluation and tuning, and emergency service response (40 hours allocated).

Critical security requirements mandate hardening per CIS Benchmarks and NIST SP 800-123, access management with distinct user roles and strong passwords, AES-256 encryption at rest and TLS v1.3 or v1.2 in transit, automated daily backups, system logging with 12-month retention, and prohibition of personal devices. Contractor personnel must comply with HSPD-12 and obtain NIST badges; a personnel roster is due within 14 days of award.

Deliverables include a safety plan (7 business days before work), quality control plan (10 days after award), preventative maintenance schedules (30 days prior to visits), and monthly service reports (5 days after each visit).