ACS OnSite Aparato A&E Specifications - Brivo Systems

More documents

Recommendations

Info

Page 3 Architectural and Engineering Specifications: Aparato ®S. IP: Internet ProtocolT. UI: User InterfaceU. PoE: Power over Ethernet1.03 REFERENCESA. Underwriters Laboratories, Inc. (UL) (www.ul.com)1. UL294 – Underwriters Laboratory Safety Standard 294 for Access ControlSystem products.1.04 QUALITY ASSURANCEA. Manufacturer shall be capable of providing field service representation duringconstruction and approving application method.1.05 WARRANTYA. Refer to conditions of the contract for project warranty provisions.B. The manufacturer shall warrant that the hardware product(s) are free from defect inmaterials and/or workmanship for a period of one (1) year from the date of shipment.1.06 PERFORMANCEA. The appliance shall conform to Energy Star Power and Performance standardsB. Performance measurements shall be bench marked using Sandra Dhrystone 4.21.07 MAINTENANCEA. The ACS manufacturer shall provide periodic software upgrades. When changes aremade to the appliance software, those updates will be available to the customer via thesoftware support agreement.1.08 SUPPORTA. On-site support shall be provided by the local authorized installation company.B. Installing company shall provide evidence that it is an authorized dealer in goodstanding for the manufacturer of the On-Site system, and that it meets themanufacturer’s technical certification requirements.1.09 SYSTEM DESCRIPTIONA. Application Functions1. All access control data shall be managed and maintained through a Web-basedinterface to the ACS appliance.2. All Access and System events shall include a time stamp when the eventoccurred, and shall be based on standard Greenwich Mean Time (GMT).3. The system shall include the ability to make configuration changes necessary forensuring data integrity and facility security.4. The ACS shall provide a wide range of communications protocols to control fieldpanels so that all commands and updates to the panels are verified and shall beretried if communication attempts fail.5. The ACS shall be capable of automatically discovering the Security DoorController (SDC) field panel configuration and setup all necessary parameters toestablish proper communication.6. The system shall provide firmware installation capabilities to all connected SDCpanels.© 2013 Brivo Systems LLC. All rights reserved. 7/1/2012
Page 4 Architectural and Engineering Specifications: Aparato ®B. System Architecture1. The access control system shall consist of a centralized Access Control Server(ACS), scalable in configuration and capable of spanning geographically from asingle facility to multiple facilities; enabling managed access control to remotelyconnected facilities worldwide.a. The ACS shall reside at any one facility within the security infrastructure, asdetermined by the solution design.2. The ACS shall maintain all configuration data for the entire system and shallfunction in a secure distributed architecture, sending configuration changes to,and receiving event activity from: Security Door Controllers (SDC), door edgedevices, or I/O modules through secure encrypted channels.3. The ACS appliance itself shall be secure, offering only the network servicesnecessary to perform its functions and capabilities.a. Ethernet network protocols shall be limited to the following inbound ports:1) HTTP port 802) HTTPS port 4433) SSL ports 56079 & 56080b. Outbound ports shall be limited to the following network ports:1) NTP port 1232) SSH port 224. The ACS shall be a rack-mountable server class computer, running a LinuxRTOS and shall perform as a standalone access control appliance utilizing anembedded Web server and software interface designed for access controlapplications up to 1000 readers.a. All administrative data management shall be performed using an InternetBrowser connection to the ACS appliance across a secure 128-bit SSLchannel.5. The ACS appliance shall include an integrated Trusted Platform Module (TPM)providing hardware-backed, software integrity verification.a. The ACS shall fully encrypt data storage using a 256-bit key AdvancedEncryption Standard (AES-256).b. The ACS shall comply with ISO Standard 11889 to:1) Ensure stored data is protected against software attacks and greatlysecured in case of physical theft of the device.2) Guard against unauthorized modification of application software andprovide tamper detection.3) Simplify software upgrades by eliminating tokens and other peripheralsecurity measures.6. Encryption & Authenticationa. Communications between Security Door Controller (SDC) panels and theACS appliance shall be encrypted using 128-bit SSL encryption.b. The ACS shall include the capability to use FIPS 140-2 validated embeddedencryption modules for all network communications.c. The ACS appliance shall validate the identity of any SDC panel attemptingto communicate with it through the exchange of X.509 digital certificates.7. Encrypted Data Storagea. Live database shall be encrypted utilizing AES-256 encryption standards.b. Back- up files shall be compressed and encrypted.© 2013 Brivo Systems LLC. All rights reserved. 7/1/2012
Page 1 and 2: sArchitectural & Engineering Specif
Page 3: Page 2 Architectural and Engineerin
Page 7 and 8: Page 6 Architectural and Engineerin
Page 9 and 10: Page 8 Architectural and Engineerin
Page 11 and 12: Page 10 Architectural and Engineeri

ACS OnSite Aparato A&E Specifications - Brivo Systems

Create successful ePaper yourself

Delete template?

Save as template?