N059--VAMC TLS Upgrade (VA-26-00038390)

Solicitation / RFP / RFQ

This document is a solicitation for the VAMC TLS Upgrade (VA-26-00038390) project. The Department of Veterans Affairs, Network Contracting Office 23, is seeking proposals for this upgrade.

While specific technical requirements are not detailed in this excerpt, the project title indicates a need for a TLS (Transport Layer Security) upgrade at a VAMC facility.

• Solicitation Number: 36C26326Q0427

• Product Service Code: N059

• NAICS Code: 561621 (Security Systems Services (except Locksmiths))

• Contracting Office Address: DEPARTMENT OF VETERANS AFFAIRS, NETWORK CONTRACTING OFFICE 23, 1303 5TH STREET, SUITE 300, CORALVILLE IA 52241

• Point of Contact: Amanda Patterson-Elliott, Contract Specialist (amanda.patterson-elliott@va.gov, 319-688-3578)

• Set-Aside: SBA (Small Business Administration)

This appears to be an award notice or a summary related to a previous award, as indicated by the "AWARD INFORMATION" section detailing a previous award to CONTROL SERVICES INC for $174,498.00 on 03-24-2026. The original solicitation number is 36C26326Q0427, and the award number is 36C26326P0336.

Amendment / Modification

This amendment (0001) to Solicitation 36C26326Q0427 modifies the original solicitation by:

• Publishing Technical Questions and Government Answers.

• Publishing an updated Statement of Work (SOW).

• Extending the solicitation period for receipt of offers.

• The SOW has been updated.

• The period of performance for the solicitation has been extended.

• The deadline for receipt of offers (quotes) has been extended to Tuesday, March 17, 2026, at 5:00 PM CDT.

• Quotes should be sent via email to amanda.patterson-elliott@va.gov.

Amendment / Modification

This document is an amendment to a combined synopsis/solicitation for a C•CURE 9000 and TLS Encryption Upgrade for the VA Nebraska Western Iowa Health Care System.

Key changes include:

• Answers to vendor-submitted questions.

• An updated Statement of Work (SOW).

• An extended solicitation closing date and time.

• Statement of Work (SOW)

• The solicitation closing date and time have been extended. The original response date was 03-17-2026 5:00PM CENTRAL TIME, CHICAGO, USA.

Solicitation / RFP / RFQ

This solicitation is for the "VAMC Access Control TLS 1.3 Upgrade and Controller Replacement" project at the Department of Veterans Affairs Nebraska-Western Iowa Health Care System in Omaha, NE. The primary goal is to upgrade the existing physical access control system (PACS) infrastructure from TLS 1.2 to TLS 1.3 encryption standards. This upgrade is necessary to maintain system operability, manufacturer supportability, and cybersecurity compliance due to the expiration of the TLS 1.2 host certificate on February 18, 2026. Failure to complete this upgrade could result in a loss of communication between the C•CURE server and field controllers.

• Upgrade approximately 91 Software House control panels to TLS 1.3 encryption.

• Replace 52 first-generation iSTAR Edge controllers with second-generation hardware.

• Update firmware on all applicable controllers to the latest supported versions.

• Integrate with existing or EHRM-provided Ultra control panels.

• Furnish and install iSTAR Ultra G2 ACM and GCM boards, iSTAR Edge G2 controller motherboards, and associated power supplies and batteries.

• Install Ultra control panels at designated facility locations.

• Perform controller-level programming updates, configure system schedules, alarms, and operational parameters.

• Deploy updated system graphics and configuration settings.

• Provide operator training on system operation, controller management, and alarm/event response.

• Deliverables include fully installed and operational TLS 1.3 compliant PACS controllers, updated firmware, system configuration documentation, test and commissioning verification, and operator training completion.

• Contract Type: Not explicitly stated, but implied to be a fixed-price contract based on the pricing structure.

• Period of Performance: March 30, 2026, to June 30, 2026.

• Estimated Value: Not stated.

• Offers are due by March 13, 2026, 12:00 PM CST.

• Offers must be submitted electronically or via mail to the addresses specified.

• Pricing must be firm fixed pricing, including all labor, overhead, profit, materials, shipping/delivery, and associated costs.

• Offerors must provide evidence of personnel experience with TLS encryption and C•CURE 9000 server environment.

• Offerors must provide up to five past performance references from the last three years.

• Evaluation will be based on the lowest-priced quote that does not exceed available funding and is found to be reasonable. Price is the sole evaluation factor.

• Failure to submit required information may result in rejection.

• This procurement is a total set-aside for Small Business.

• Offerors must be registered in the System for Award Management (SAM) at www.sam.gov.

• NAICS Code: 561621 (Security Systems Services), Size Standard: $9.5 Million.

• All contract administration matters will be handled by the Network Contracting Office 23.

• Invoices must be submitted electronically in accordance with VAAR Clause 852.232-72.

• The contractor shall comply with all applicable Federal, State, and local laws, executive orders, rules, and regulations.

• Specific clauses related to cybersecurity, information security, and data protection are included.

Solicitation / RFP / RFQ

This solicitation is for the VAMC Access Control TLS 1.3 Upgrade and Controller Replacement project at the Department of Veterans Affairs Nebraska-Western Iowa Health Care System, Omaha Division Medical Center. The primary goal is to upgrade the existing Software House C•CURE 9000 Physical Access Control System (PACS) infrastructure from TLS 1.2 to TLS 1.3 encryption standards. This upgrade is critical to maintain system operability, manufacturer supportability, and cybersecurity compliance due to the expiration of the TLS 1.2 host certificate.

• Upgrade system encryption to TLS 1.3.

• Replace approximately 52 first-generation iSTAR Edge controllers with second-generation hardware.

• Update firmware on all applicable controllers to the latest supported versions.

• Maintain secure connectivity between controllers and the C•CURE 9000 server environment.

• Approximately 91 Software House control panels are covered under this scope.

• Deliverables include fully installed and operational TLS 1.3 compliant PACS controllers, updated firmware, system configuration documentation, test and commissioning verification, and operator training.

• Contract Type: Not explicitly stated, but implied to be a fixed-price contract based on the pricing schedule.

• Period of Performance: 04-01-2026 to 06-30-2026 (Base period).

• Estimated Value: Not explicitly stated.

• Proposal Submission Deadline: March 13, 2026, 12:00 PM CST (Block 8).

• Submission Instructions: Offers must be submitted in writing to John Milroy, Contracting Officer, via email to john.milroy@va.gov with "Solicitation 36C26323Q0153" in the subject line. Quotes must be electronic, 11-point Arial, Calibri, Courier, or Times New Roman font, and not exceed 20 pages.

• Evaluation Criteria: The award will be made to the responsible offeror whose quote, conforming to the solicitation, quotes the lowest price, does not exceed the amount of funding available, and is found to be reasonable. Price is the sole evaluation factor. Special standards of responsibility include Special Experience (TLS encryption and C•CURE 9000 server environment) and Past Performance.

• This procurement is a total set-aside for Small Business.

• Offerors must be registered in the System for Award Management (SAM) at www.sam.gov.

• NAICS Code: 561621 (Electrical Contractors and Other Wiring Installation Contractors) with a size standard of $9.5 Million.

• Failure to submit required information, statements, or certifications may result in rejection of the quote.

• The solicitation includes numerous clauses related to cybersecurity, information security, and data protection, including requirements for TLS 1.3 encryption and compliance with NIST standards.

Wage Determination

This document is a U.S. Department of Labor Wage Determination (No. 2015-5771, Revision No. 28) for the Service Contract Act, applicable to the Nebraska counties of Hall, Howard, and Merrick. It establishes minimum wage rates and fringe benefits for various occupations.

• Applicability: This wage determination applies to contracts subject to the Service Contract Act awarded on or after January 1, 2017, or solicitations issued on or after that date.
• Minimum Wage Rates: The document lists specific hourly wage rates for a wide range of occupations, categorized by general areas such as Administrative Support, Automotive Service, Health Occupations, Information Technology, and various trades.
• Fringe Benefits: In addition to wages, the determination outlines required fringe benefits, including:
  • Health & Welfare: $5.55 per hour (or $222.00 per week / $962.00 per month).
  • Paid Sick Leave (EO 13706): $5.09 per hour (or $203.60 per week / $882.27 per month).
  • Vacation: 1 week after 1 year, 2 weeks after 2 years, 3 weeks after 10 years of service.
  • Holidays: A minimum of eleven paid holidays per year.
• Hazardous Pay: An 8% differential is applicable for high-hazard positions (ordnance, explosives) and a 4% differential for low-hazard positions.
• Uniform Allowance: Contractors must furnish uniforms or reimburse employees for the cost, including maintenance, at a rate of $3.35 per week.
• Conformance Process: Procedures are outlined for contractors to request wage rates for classifications not listed in the determination, requiring a written report and approval from the Wage and Hour Division.

This document is crucial for bidders to accurately estimate labor costs for their proposals. It ensures compliance with federal labor laws by specifying the minimum wages and benefits that must be paid to service employees working on covered contracts within the specified geographic area.

Solicitation / RFP / RFQ

This is a combined synopsis/solicitation for commercial items, issued as a Request for Quotes (RFQ) under Solicitation Number 36C26326Q0427. The Department of Veterans Affairs (VA) is procuring services for a C•CURE 9000 and TLS Encryption Upgrade for the VA Nebraska-Western Iowa Health Care System in Omaha, NE, and the Grand Island VA Medical Center in Grand Island, NE.

• C•CURE 9000 and TLS Encryption Upgrade.

• Specific contract line items, quantities, and units of measure are detailed within the attached solicitation documentation.

• Additional requirements are listed within the attached solicitation document.

• Contract Type: Firm Fixed Price.

• Period of Performance: March 30, 2026, to June 30, 2026 (base year).

• Technical questions due in writing by March 11, 2026, 10:00 AM Central Time.

• Quotes are due by March 13, 2026, 12:00 PM Central Time.

• Quotes must be emailed to amanda.patterson-elliott@va.gov in .pdf or .docx format.

• Offerors shall submit offers by the Due Date/Time specified in Block 8 of Standard Form (SF) 1449.

• FAR provisions 52.212-1 and 52.212-2 apply and are detailed within the solicitation.

• FAR clause 52.212-4 applies and is included within the solicitation.

• Total Small Business set-aside.

• Prospective offerors must be verified as actively registered in the System for Award Management (SAM) at www.sam.gov.

• NAICS Code: 561621 (Security Systems Services), with a size standard of $25 million.

• Quotes will only be accepted from responsible contractors.

• The solicitation document and incorporated provisions and clauses are current through Federal Acquisition Circular 2025-06.

• Defense Priorities and Allocations System (DPAS) does not apply.

• Attached documents include: Solicitation 36C26326Q0427 and Wage Determination 2015-5771.