VAMC TLS Upgrade (VA-26-00038390)   2

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation, quotes are being requested. Solicitation number 36C26326Q0397 is issued as a request for quotes (RFQ). The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2025-06. This procurement is a total set-aside for a Small Business set-aside. Prospective offerors must be verified as an active registration in the System for Award Management (SAM) at www.sam.gov prior to submission of their offer. Quotes will only be accepted from responsible contractors. The NAICS code for the solicitation is 561621 with a size standard of $25 million. A list of the contract line items, quantities, and units of measure are listed within the attached solicitation documentation. The VA anticipates a firm fixed price contract award for all resources and labor necessary for C CURE 9000 and TLS Encryption Upgrade for the VA Nebraska-Western Iowa Health Care System, 4101 Woolworth Avenue, Omaha, NE 68105 and for the Department of Veterans Affairs, Grand Island VA Medical Center, 2201 N Broadwell Ave, Grand Island, NE 68803. The period of performance is 03/30/2026 to 06/30/2026 for the base year period of performance. FAR provisions 52.212-1 and 52.212-2 apply to this procurement and are detailed within the attached solicitation document. FAR clause 52.212-4 apply to this procurement and are included within the attached solicitation document. Additional requirements are listed within the attached solicitation document. The Defense Priorities and Allocations System (DPAS) does not apply to this acquisition. Submission of Quotes Technical questions shall be accepted by the Government in writing only no later than 10:00 AM Central Time, Wednesday March 11, 2026 Quotes are due to the Contracting Office by Friday March 13, 2026 at 12:00 PM Central Time. Quotes are required to be emailed to amanda.patterson-elliott@va.gov in .pdf or .docx format only prior to the solicitation closing date and time. Offeror shall submit offers by Due Date/Time specified in Block 8 of Standard Form (SF) 1449 of solicitation to Amanda Patterson-Elliott email amanda.patterson-elliott@va.gov with Solicitation 36C26326Q0427 in subject line. It is the responsibility of the offeror to ensure their quote is received in its entirety before the solicitation closing.

Background
This solicitation is issued by the Department of Veterans Affairs (VA) as a combined synopsis/solicitation for commercial items, specifically for the C•CURE 9000 and TLS Encryption Upgrade.

The VA Nebraska-Western Iowa Health Care System aims to upgrade its physical access control system to enhance cybersecurity and maintain compliance with manufacturer support requirements. This procurement is set aside for small businesses.

Work Details
The contractor will be responsible for upgrading the existing Software House C•CURE 9000 Physical Access Control System (PACS) from Transport Layer Security (TLS) 1.2 to TLS 1.3. Key tasks include:

1. Hardware Replacement and Installation:
- Furnish and install iSTAR Ultra G2 ACM and GCM boards, 52 iSTAR Edge G2 controller motherboards, associated power supplies, and batteries.
- Replace existing first-generation Edge controllers with second-generation units.
- Install Ultra control panels at designated facility locations.

2. Firmware and Cybersecurity Upgrades:
- Upgrade firmware on all new and applicable existing controllers to the latest supported release.
- Configure controllers to operate using TLS 1.3 encryption.
- Implement host-based certificates where required.
- Reconnect all controllers to the C•CURE server following upgrades.

3. Programming and Configuration:
- Perform controller-level programming updates, configure system schedules, alarms, operational parameters, and deploy updated system graphics as required.

4. Testing and Commissioning:
- Conduct point-to-point verification testing, system communications validation, functional testing of access control devices, system startup, commissioning, and verification of TLS 1.3 secure communications.

5. Training:
- Provide operator training covering system operation post-upgrades, controller management, monitoring, alarm response procedures.

Place of Performance
The work will be performed at the VA Nebraska-Western Iowa Health Care System located at 4101 Woolworth Avenue, Omaha, NE 68105.