C19-0918

City of Glendale — Regular Meeting (2021-04-13)

View PDF Item 43 Meeting page

Extracted text (via ocr_local) 46744 characters

C19-0918

AA) MOTOROLA SOLUTIONS

CITY OF GLENDALE, AZ

PREMIERONE SUITE TO SUPPORT PUBLIC SAFETY DISPATCHING, RECORDS, AND JAIL MANAGEMENT

OPERATIONS TECHNICAL DOCUMENTATION SEPTEMBER 5, 2019

19-PS-95976 / AZP19P104A

The design, technical, pricing, and other information (“Information”) furnished with this submission is proprietary and/or trade secret information of
Motorola Solutions, Inc. ("Motorola Solutions”) and is submitted with the restriction that it is to be used for evaluation purposes only. To the fullest
extent allowed by applicable law, the Information is not to be disclosed publicly or in any manner to anyone other than those required to evaluate the
Information without the express written permission of Motorola Solutions.

MOTOROLA, MOTO, MOTOROLA SOLUTIONS, and the Stylized M Logo are trademarks or registered trademarks of Motorola Trademark Holdings,
LLC and are used under license. All other trademarks are the property of their respective owners. © 2019 Motorola Solutions, Inc. All rights reserved.

19-PS-95976 / AZP19P104A

TABLE OF CONTENTS

Section 1
SYStEM DeOScr Pe Orn ciiiz secs sanede ces sdczeks oc ses sesstsastcgzacadscsaasapasaniasbinty isasds thea cptossdsianavipdece

1.1 Solution Overview
1.1.1 Participating Agencies..
1.1.2 Basis for System Sizing
1.1.3 Application Software and System Components
1.1.4 PremierOne Application Client Software Licensing
1.1.5 Microsoft, VMware, other Software Licensing Ancillary components
1.1.6 PremierOne Interfaces
1.2 PremierOne System Architecture
1.2.1. PremierOne High Availability Architecture
1.2.2 Microsoft Active Directory Service
1.2.2.1. Name Resolution.....
1.2.3 PremierOne Common Services
1.2.3.1. Geographic Information System (GIS)
1.2.3.2 PremierOne System Security
1.2.3.3 Microsoft Reporting Services
1.3 CJIS and Compliance
1.3.1.1. PremierOne Handheld Specific CJIS Security Redulismant Compliance............ 1-11

1.4 System Platform and Component. .............c.ccsssesecseseseesestssesesseseseavseseeatneaens

1.4.1. PremierOne Storage and Backup
1.4.2. Ancillary Components ...................
1.5 TCP/IP Network and Data Center Ranuinienstite
1.5.1 Network Requirements
1.5.1.1. Network Bandwidth Calculations
1.5.2 Data Center Requirements
1.5.3. PremierOne Workstation Specifications

1.5.3.1 PremierOne CAD Recommended Specifications ................ccccccccessesessesesteseseeseses 1-16
1.5.3.2 | PremierOne Mobile CAD and Records Mobile Workstation Recommended

SPECHICAUONSs/ 3, 0).cssshrrveGelniyicesaoudosae sebtederssadethaseersazrsRabhlaaanhisuaaanusaaaeers 1-17
1.5.3.3 PremierOne Records Workstation Recommended Specifications ...................0... 1-17

1.5.3.4 PremierOne Records Mobile Recommended Specifications...

1.6 Disaster Recovery (DR)
1.6.1.1 CAD Disaster Recovery
1.6.1.2 Records Disaster Recovery

1.7 Technical Considerations and Design Requirements
1.7.1 City of Glendale, AZ Responsibilities: ........
1.8 Third Party Solution Descriptions
1.8.1 Trancite Logic Systems (Easy Street Draw)............0..ccccccccccesesscescsesscsecsvaecevesevsevavenee

PremierOne Suite to Support Public Safety Dispatching, Records, and Jail Management Operations Technical Documentation Use or disclosure of this
proposal is subject
19-PS-95976 / AZP19P104A to the restrictions on the cover page

@ Motorola Solutions Confidential Restricted System Description i

1:6.:2' ‘ComMSys:GEIPS ices scsisissassesdeaassssacscetasaicssevsdsdatasettacs cansaetsaasasardsiadstabatsveaseivdstezasassatecas
1.9 Application Descriptions
1.9.1. PremierOne CAD with Automatic Resource Location (ARL)
1.9.1.1. PremierOne CAD Concepts
1.9.2 PremierOne Mobile with Mobile Mapping
1.9.3 PremierOne Records
1.9.4 PremierOne Records Mobile
1.9.5 Command Central Jail
1.9.5.1 Overview.
1.9.5.2 Command Central Jail — PremierOne Records Integration
1.9.5.3 Command Central Jail Interfaces
1.9.6 PremierOne Handheld with Mapping .........
1.9.7 PremierOne Integrated NG911 Call Control Solution...
1.9.7.1 Text-to-9-1-1 Capability (Vesta) ..
1.10 PremierOne Service Solutions
1.10.1. Legacy Data Access or Data Migration
1.10.1.1 Legacy Records Query Data Access
1.10.1.2 Legacy CAD Data Conversion
1.10.1.3 Legacy Records Convert on Demand
1.10.2 Intelligent Data Discovery Services (IDD) for PremierOne CAD ...............c.ccceceeeoee 1-38

Section 2
Sample Project Management Plan
2.4 Project Approach
2.1.1 Project Management
2.1.1.1 Motorola Solutions PM
2.1.1.2 City PM
2.1.2 Team Organization
2.1.2.1. Organization Chart
Po Project Repository and Project Control Registe’
2.3 Schedule Management
2.3.1 Milestones
2.3.2 Schedule Control
2.3.3 Cutover and Transition Plan
2.4 Communication Management
2.4.1. Communications Management Plan ...
2.4.2 Meetings
2.4.3 Project Communication Tools and Documentation ...............:cccccceeseseeeeeeee 2-8
2.4.3.1 Project Escalation Process....................
2.5 Quality Assurance...
2.6 Risk Management ......
2.6.1 Risk Management Plan -
2.7 PAGHGRY TREES 2-252 5925 ssZs2edksctetetecaycoatly-ylaes esa Petal eccledealedyesSyeaXha'sdashad cp vsedevesnsansibe tis haa ieh feabeass

September 5, 2019 City of Glendale, AZ
Use or disclosure of this proposal is subject PremierOne Suite to Support Public Safety Dispatching, Records, and Jail Management Operations
Technical Documentation

to the restrictions on the cover page 19-PS-95976 / AZP19P104A

ii Table of Contents Motorola Solutions Confidential Restricted TAA)

2431) Action [RSIS MANAGEMENE PHAN csasaasssccssassospsnstessssacicasdssanpedaseaszep acai ascasaess seas ssasesspantio’ 2-10
2.8 Change Control
2.8.1 Change Request Procedure
2.8.2 Change Control Process
2.9 Project Contact List

Section 3
SLALSMENE- OF WOK y, «ore pr.ccceaboesesiacyesch scpeynyvetaadi sedate ty doacssaseseiies yy eg oops las gOea naa seaa tebe bindas sensei bagaisaasaaeaas
3.1 CAD/Mobile and Records Statement of Work
3.1.1. Contract Award
3.1.2 Contract Administration and Project Initiation
3.1.3. Project Planning and Pre-Implementation Review
3.1.4 Project Kickoff
3.1.5 Contract Design Review............
3.1.6 Product Overview and Discovery so
3.1.6.1. Site Survey and Infrastructure Planning...
3.1.6.2 IP Network Analysis
3.1.7 CAD/Mobile Business Process Review (BPR) and System Provisioning
3.1.7.1. Business Process Review (BPR) and Requirements Gathering ................:c::0006 3-6
3.1.7.2 Data Gathering
3.1.7.3. PremierOne CAD and Mobile Provisioning
3.1.7.4 CAD User Interface Modifications
3.1.7.5 Provisioning Verification ....
3.1.7.6 GIS Boundary Workshop...
3.1.7.7. GIS Scope Review
3.1.7.8 Draft Geodatabase
3.1.8 Records Detailed Design Review and Jail Business Process Review
3.1.8.1 Business Process Review
3.1.8.2 Records Detailed Design Documentation (Specification)
3.1.8.3 Records Advanced Configuration Tool
3.1.8.4 Records/Jail Provisioning
3.1.9 CommandCentral App with Handheld features Agency-User Setup..
3.1.9.1. CommandCentral App Provisioning
3.1.10 | Hardware and Software
3.1.10.1 System Staging
3.1.10.2 On-Site Installation
3.1.10.3 Cumulative Updates
3.1.10.4 CAD/Mobile Client Software Installation
3.1.10.5 Records Client Package Configuration/Installation
3.1.11 Interfaces
3.1.11.1 ISD Review
3.1.11.2 Interface Development, Installation and Configuration

PremierOne Suite to Support Public Safety Dispatching, Records, and Jail Management Operations Technical Documentation Use or disclosure of this
Proposal is subject

19-PS-95976 / AZP19P104A to the restrictions on the cover page.
[AA Motorola Solutions Confidential Restricted System Description iii

3.1.11.3 Federal Uniform Crime Reporting (UCR)/National Incident Based Reporting
System (NIBRS)/Interface....

3.1.11.4 Crash Report (TAR)
3.1.12 | CAD/Mobile Reports and Dashboards
3.1.12.1 Reports
3.1.12.2 CAD Intelligent Data Discovery (IDD)
3.1.12.3 Records Intelligent Data Discovery (IDD)
3.1.13 Records Reports
3.1.13.1 Reports Sa
3.1.13.2 Property and Evidence Data Conversion
3.1.13.3 Conversion on Demand (CoD) Tool
3.1.14 PremierOne Training
3.1.14.1 Learning Management System
3.1.14.2 Instructor-Led Training
3.1.15 | PremierOne Acceptance Testing
3.1.15.1 Project Test Plan
3.1.15.2 Functional Acceptance Testing
3.1.15.3 Interface Testing.................:cee
3.1.15.4 System Level Testing
3.1.16 Go Live Planning...
3.1.16.1 Cutover Event
3.1.17 30-Day Reliability Period
3.1.18 Documentation
3.1.19 Project Closure — Transition to Support

Section 4
Training Plan... ut
4.1 Course Listing

4.2 Training Overview
4.2.1. System Administrator
4.2.2 Training Facilities and Schedules

4.2.2.1. Training Methods and Procedures
4.2.3. Training Subsystem
4.2.4 Session Attendance
4.2.5 Learning Management System (LMS) Requirements
4.3 Course Descriptions

Section 5
PREMIBIONS-GSIS REQUIFOMEBIIS 2.2. aacsec6sscczasoner coadarscaiacsacicssssapascprstisesh acted wiormeuitornsworenicweee
5.1 Overview

5.2 PremierOne Services Geodatabase

5.3 GIS Data Requirements and Recommendations

5.4 GIS Data Supported by PremierOne Services
5.4.1 Street Centerline

to the restrictions on the cover page. 19-PS-95976 / AZP19P104A

iv Table of Contents Motorola Solutions Confidential Restricted ()

SASL. CRT INRPEN PAD: FRU 5a ch sce pass Viens cs Da Ai do pae vos sh Pan sapabW0 do pay ed ed ena dos weadeadsaepisvaal
5.4.3 Street Name Standardization Exceptions Table
5.4.4 Location Point Layer Requirement ...............0:cccccccscesecseseeseeeseeeeee

5.4.4.1 Address Point Feature

5.4.4.2 Common Place Point Feature ..

5.4.4.3 Common Place Alias Table
5.4.5 Response Boundaries
5.4.6 Reporting District Boundaries
5.4.7 Contractor Boundaries
5.4.8 Map Book Features
5.4.9 Premise Hazard Areas
5.4.10 Map Display

Section 6

Preliminary Performance Schedule .iissis:.cesccssasssscstss setesssescteacetesstecstessadecetesstessedecetesgsdacat sestensbsvonsqnge 6-1
Section 7

BP VORSEMIENY FUCA Seah 20 55 20.05 30041 2 tgcnacencacedsdeqzseqaq.acicas debaageasdes sass reagasamasegacae ns aaasesecegeznageasaitaenegidsdeseseeesserryns 7-1
Section 8

MRREVERES £5 FHD KCRG sachs cia ensrd gn cas sana sug hagas tip nabs dnsnceha cade aka gandecetac dhanaddaaatacgtehdbeastertare’ese dona’ 1
Section 9

Addendunt 7: ‘Vigilant DOCUMEFISHON: :.5.56scrsaiia3050500 sosonstases cess ceasds di Veedsavinsntaxcbeseaagascssseagecasasesescasasers 9-1

City of Glendale, AZ
September 5, 2019

SECTION 1

SYSTEM DESCRIPTION

1.1 SOLUTION OVERVIEW

Motorola Solutions is pleased to present the following solution for the City of Glendale, AZ
(hereinafter referred to as the “City”).

Motorola Solution’s offering is comprised of PremierOne server hardware, PremierOne server
networking hardware, system software, PremierOne application software, PremierOne client
software, interfaces and services (as stated in the Statement of Work.)

The following presents a logical illustration of the solution components.

CITY OF GLENDALE, AZ - SYSTEM DIAGRAM

PremierOne Records
Workstations
(custoxnen suppber!)

PromierOne Mobile
Works tations
(customer supptied) +

PremierOne CAD
Works tations
(customer supplied)

Application and Test/Train VMs Host Application VMs Host

HPDL3E0 G10 HPDL360 G10

Database and Ri Serv:
Cl) acai Dates Hot poe ie

HPDL360 G10 HP01360 G10 WPDL360 G10 HPDL360 G10

——Application vLAN—,
——Managerent vLAN—
Nimble SAN ——Detebare vA —, Nimble SAN

PRIMARY SITE DISASTER RECOVERY SITE

Figure 1-1 - Representative System Diagram

1.1.1 Participating Agencies

The designated agencies participating in the PremierOne system are:

e¢ Glendale Police Department

@ Motorola Solutions Confidential Restricted System Description 1-1

City of Glendale, AZ
September 5, 2019

1.1.2

1.1.3

1.1.4

Basis for System Sizing

The PremierOne solution is sized by tiers. Motorola uses Call for Service (CFS) counts to establish
the tiers of infrastructure sizing. Based on the CFS counts provided by you, this solution has been
sized as follows:

Up to 500,000 CAD Calls for Service per year

Up to 100 PremierOne CAD clients

Up to 250 PremierOne Mobile clients

3.5% annual growth for 5 years

6 years of PremierOne CAD data retention (2 years online, 4 years reporting)

The following applications, system components and services are included in this solution:

Application Software and System Components

This solution is based on Motorola Solutions PremierOne Application Software release version 4.4.

e¢ PremierOne CAD with Automatic Resource Location (ARL) via:
— PremierOne Mobile via cellular

PremierOne Mobile with Mobile Mapping

PremierOne Records with UCR and IBR (SIBR) submission only
PremierOne Mobile Records

PremierOne Property and Evidence

Command Central Jail

PremierOne Handheld

PremierOne Integrated NG9-1-1 Call Control

Legacy Records Data Access — Data Warehouse

Legacy CAD Data Conversion

PremierOne Convert-on-Demand

PremierOne Hardware Components

Interfaces

Third Party Solutions

— Trancite Logic Systems (Easy StreetDraw Accident Diagramming)
— CommSys CLIPS Terminal Licenses

PremierOne Application Client Software Licensing

The following table summarizes the number of PremierOne client application software licenses for all
agencies listed in Participating Agencies.

Table 1-1 - PremierOne Licensing

Pre erOne e e re ea 0 e
PremierOne CAD Dispatch with Mapping 18 N/A
PremierOne CAD Low Use N/A 13
PremierOne Mobile with Mapping N/A 125
PremierOne Records N/A 175
PremierOne Records Mobile N/A 125

Use or disclosure of this proposal is subject PremierOne Suite to Support Public Safety Dispatching, Records, and Jail Management Operations
Technical Documentation
to the restrictions on the cover page. 19-PS-95976 / AZP19P104A

1-2 Table of Contents Motorola Solutions Confidential Restricted @

City of Glendale, AZ
September 5, 2019

PremierOne Licenses Per Seat Concurrent
CommandCentral Jail N/A 18
PremierOne Handheld N/A 25
PremierOne NG911 Call Control for Voice 18 N/A
PremierOne NG911 Call Control for Text 18 N/A

1.1.5. Microsoft, VMware, other Software Licensing Ancillary components

The following table lists type and number of Microsoft and VMware licenses and the party
responsible for providing them.

Table 1-2 - Microsoft and VMware Licensing

DR Site Total Customer Motorola

Provided Provided

Microsoft & VMware
Licenses
Microsoft DataCenter
2016 (16 core) x
Microsoft DataCenter 16 16 32 xX
2016 (2 core) Add
License

Microsoft Windows 2016 2 0 2 Xx
Os
Microsoft SQL 2017 4 3 7 X
Enterprise 4 Core
License

Microsoft SQL 2017 5 5 10 xX
Enterprise 2 Core Add On
License

Microsoft SQL 2017 6 3 8 xX
Standard 4 Core License
Microsoft SQL 2017 5 5 10 xX
Standard 2 Core Add On
License

Microsoft System Center 48 48 96 Xx
Operation Manager 2016
(SCOM)

VMware vCenter 1 1 2 X
Standard

VMware vSphere Ent+ 9 8 17 xX
CPU

VMware Site Recovery 0 2 2 X
Manager

Primary Site

PremierOne Suite to Support Public Safety Dispatching, Records, and Jail Management Operations Technical Documentation Use or disclosure of this
Proposal is subject
19-PS-95976 / AZP19P104A to the restrictions on the cover page.

@ Motorola Solutions Confidential Restricted System Description 1-3

City of Glendale, AZ

September 5, 2019

The following table lists the type, number and who is providing these ancillary items:

Description

Table 1-3 - Ancillary Components

Details

Customer Motorola
Provided Provided

Quantity

F5 Load Virtual/Physical Network Load Xx 4
Balancers Balancing Software Integrated with
Solution
SolarWinds Network Performance Monitoring X 1
SolarWinds NetFlow Traffic Analyzer X 1
GIS Editing 10.3 of Esri ArcGIS Desktop and X
Software Network Analyst Extension Software
Client Access Microsoft Windows Server 2016 Xx 1 Per Client
Licenses Refer to
Microsoft
Website for
Guidance
CommSys Enables State Queries X 1
ConnectCIC
FortiGate Provides server component isolation 4
Network Devices | from other systems within the City’s
data center by means of a firewall
router.
Extreme 16 port 10Gb Layer 2 Switching, Layer 4
Networks X620 | 3 IPv4/IPv6 Routing
Extreme 48 port GbE Management vLAN 4
Networks X420 | Switch
HPe DL360c Host Server 8
Gen10 w/dual
Xeon Gold 6146,
384 GB RAM, 2
NIC, 2x 8GB
microSD
HPe DL360 Monitor Server 1
Gen10 w/ single
XeonS 4114,
128 GB RAM,
5x1.2TB HDD
Nimble Storage |SAN 2
HF20
42TB
HPe StoreOnce | Location to Store Backups 1
3520

Use or disclosure of this proposal is subject
Technical Documentation

to the restrictions o

in the cover page.

1-4 Table of Contents

PremierOne Suite to Support Public Safety Dispatching, Records, and Jail Management Operations

19-PS-95976 / AZP19P104A
Motorola Solutions Confidential Restricted (J)

City of Glendale, AZ
September 5, 2019

Description Details Customer Motorola Quantity

Provided Provided

Equipment Rack | Rack Mount Keyboard and Monitor 2

ioe oar Cabinet Dimensions
78.9 in. x 39.7 in. x 24 in.

Shipping Dimensions

(with packaging materials)

86.2 in. x 48 in. x 35.6 in.

Shipping Weight

1868 Ib. — Total

Installed Weight

385 Ib. — Rack

— Equipment 743- Total

Maximum Load of Rack

3000 Ib.

Rack Clearance

Front: 48 inch

Back: 30 inch

Power Distribution Units

HPE 4.9kVA 208V

1.1.6 PremierOne Interfaces

The table below list the specific interfaces included in our solution. An Interface Specification
Document (ISD) is included for each interface in Attachment A. The ISD details the specific features
and functionality of the interface and describes the implementation process and responsibilities of the
involved parties. Any requests for change to the [SD following contract is subject review and
consideration through the change control mechanism of the contract.

The “Priority” column in the table below is defined as follows:

e Priority | - Interfaces that will be deployed, tested, and accepted by Glendale prior to go-live.

e Priority 2 - Interfaces that are considered non-critical to Glendale going live on the system.
Motorola and Glendale will collaborate to create a timeline on the deployment of such interfaces
after Glendale is live on the system.

Table 1-4 - Solution Interfaces

Interface Name Functionality Priority DOR

YIN?

State/NCIC PremierOne Suite Services |COMMON - Suite State 1 ¥
Query

911 Interface CAD COMMON - E911/TDD 1 Y

RTCC CAD Server COMMON - On-Prem 2 N
Aware Video

@ Motorola Solutions Confidential Restricted System Description 1-5

City of Glendale, AZ
September 5, 2019

Interface Name Functionality Priority DR
Y/N?

CryWolf CAD Server CryWolf (Public Safety
Corporation)

Tyler HR PremierOne Suite Services |Common — Suite 1 N
Provisioning Personnel and
Roster

ASTRO Radio CAD Client ASTRO Radio Console 1 N

Console (Motorola)

ASTRO Radio PTT |CADICAD ASTRO Radio PTT 1 N
(Motorola)

Insight Query PremierOne Suite Services |Common — Suite External 2 N
Query

Legacy Records PremierOne Suite Services {Common — Suite External 1 N

Query Query

LexisNexis Records RDW Common — Records Data 2 N
View

Linx Records RDW LInX — Records (Northrop 2 N
Grumman)

CopLink Records RDW CopLink (IBM) 2 N

Justware Records Server JustWare Court Case 1 N
Management System
(JustWare)

CopLogic Records Server CopLogic DeskOfficer 2 N
Online Reporting System-
DORS (LexisNexis)

Laserfiche Records Server Enterprise Content 2 N

Management-ECM
Records (Laserfiche)

JusticeTraxx Records Server Common — Records Two- 2 N
Way Property and
Evidence

CARFAX Records Server Common — Records 1 N
Outbound Printout Creation

Buy Crash Records Server Common — Records 1 N
Outbound Printout Creation

AJACS Records Server Common — Records Two- 1 N
Way Data Exchange

State Accident Records Server Common — Records 1 N

Reports Outbound Printout Creation

Insight Records Server Common — Records 2 N

Outbound Data

1.2 PREMIERONE SYSTEM ARCHITECTURE

PremierOne is designed on the principles of Service Oriented Architecture (SOA) allowing separation
of servers and services to modular components. PremierOne is also architected to have no single point

1-6 Table of Contents Motorola Solutions Confidential Restricted ()

1.2.1

City of Glendale, AZ
September 5, 2019

of failure. Its software design is redundant, as database replication occurs across multiple servers. The
solution is built on industry standard components from Microsoft .NET architecture using Microsoft
Windows and Microsoft SQL Server. The system can be expanded through the allocation of
additional physical or logical resources as needs grow. In addition, site-to-site replication creating a
multi-site architecture with disaster recovery is included.

The PremierOne system is deployed with a single production environment incorporating the high
availability components and interfaces presented in this solution. The production environment
incorporates the high availability components and reconfigured interfaces presented in this solution.
The system design also provides a single limited use environment that can be used as a test or training
environment. The single limited environment does not include the interfaces configured for use in the
production environment.

Environment Summary:

¢ 1 Production Environment
¢ 1 Limited Use for Test or Training

PremierOne is architected around a virtualized server configuration and supports VMware vSphere
6.5 (or later) for the hypervisor. Server virtualization provides application isolation providing the
ability to isolate specific services for ease of diagnostics and hardware resource management.

PremierOne High Availability Architecture

The combined software, hardware and IT network architecture is designed to provide an integrated
high-availability system at each site. Redundant software and hardware components are the basis of
the high-availability system design. Redundant network paths are used throughout the system
configuration. Command Central Jail application is not part of the High Availability Architecture.

Multiple application servers support the application service layer and utilize load balancing to manage
the load across the servers. RAID storage configurations provide redundancy and recovery within the
storage components, and dual power supplies and circuits are used to ensure power redundancy.

Application, database and Application Delivery Controllers (ADC) failovers operate independent of
one another within PremierOne. This means the failure of one component does not require the other
components to fail over.

PremierOne’s active monitoring identifies problems and failures before they occur. For example, low
disk space or high processor utilization will trigger an alert to be sent, to notify the recipient of a
possible problems or future failure before it affects the system. In the event of a service or component
failure, PremierOne will stop using the failed service or component instance and automatically shift
over to the secondary service or component instance without impacting operations.

The following depicts the fault tolerant components of the system.
Table 1-5 - Fault Tolerant Software Components

Component

F5 to provide load balanced network traffic to the application services.

= PremierOne monitors active services and restarts them as necessary.

+ In the case of a server failure, the node is disabled transferring the load to the remaining nodes
in the cluster.

TAA) Motorola Solutions Confidential Restricted System Description 1-7

City of Glendale, AZ
September 5, 2019

1.2.2

Replicated databases on different servers. Servers are replicated in a cluster set.
- SQL Server AlwaysOn provides redundancy and automatic failover.

- In case of a database server failure, there is no user intervention required. Secondary
database becomes the active database without administrator intervention and continues
processing transactions within the data center.

Fault tolerant networking components throughout the entire stack, the use of Link Aggregation
Groups between network nodes and multipath configuration such that no single cable, port or
device can interrupt system operation.

PremierOne System Manager monitoring:
= CAD application

= Records application

= Application Delivery Controller cluster

- Database status

= Disk space

= Windows Performance Counters

The backup service (backup library and backup software), the Report Data Warehouse (ad hoc
reporting services), and the Test/Training environments are not designed to meet the same high
availability requirements as the production application and database servers. Reporting services and
test/training environment(s) are not considered critical and therefore are not redundant in the
configuration.

High availability is independent of a geographically redundant disaster recovery solution.

Microsoft Active Directory Service

PremierOne provides directory services to support the secure management and operations of

PremierOne through an isolated Microsoft Active Directory (AD) environment. The servers provided
with the solution contain computer accounts in this AD tree. Service and Administrator user accounts
and groups will be setup in the isolated Active Directory with the appropriate group memberships set.

In order to facilitate ease of user account management, PremierOne can use the City’s AD
environment for authentication. Once the user account is built in PremierOne provisioning, it can then
use LDAP to query the City’s environment for the account authentication. By using this
configuration, the City can enforce password policy, retention, and complexity requirements across
the enterprise with a user having a singular identity.

Motorola Solutions will provide a one-way forest trust from the PremierOne local domain to the
city’s Active Directory environment. The trust provides users with Domain Administrator privileges
on the City’s AD instance to access and administer the PremierOne environment while preserving
authentication and logon information. Motorola recommends that this trust be non-transitive in
nature. Motorola does not recommend a two-way trust, as none of the PremierOne service accounts
need authentication or resources on the City’s network.

PremierOne's Active Directory schema is for servers and services. Active Directory user
authentication (if desired) will be against the City's Active Directory schema.

1-8 Table of Contents Motorola Solutions Confidential Restricted (Q)

1.2.2.1

1.2.3

1.2.3.1

1.2.3.2

City of Glendale, AZ
September 5, 2019

Name Resolution

PremierOne provides host name resolution through an Active Directory Integrated Domain Name
Service (DNS). In order for systems residing outside of the PremierOne network to communicate with
the PremierOne system, the City must configure their DNS servers to forward PremierOne name
resolution requests to PremierOne DNS servers. This will allow devices on the City network to find
systems within the PremierOne environment.

For tighter integration, the City, working with Motorola, must configure their DNS servers to allow
name resolution requests from within the PremierOne systems to be processed.

PremierOne Common Services

PremierOne Common Services provides system administrators the flexibility to manage internal
services throughout the platform from a single point. PremierOne Common Services include GIS,
System Security, Reporting, and the system tools for provisioning.

Geographic Information System (GIS)

Geo-spatial data is uploaded to the system through tools implemented within Esri ArcGIS. Address
validation data is maintained in redundant Microsoft SQL Server geodatabases that store locations
and boundaries both spatially and in optimized search tables. Esri ArcGIS Servers provide routing
and ETA calculations using the Network Analyst extension. Client maps are displayed using Esri
ArcGIS Engine.

¢ PremierOne uses GIS for display, location validation, and unit recommendation. PremierOne
tools made available for ArcTool box, provides the ability to load local data manually or through
an automated model.

¢ The PremierOne Response Boundary Data Import Tool imports and aggregates boundaries in
multiple layers into a single spatial table within the geodatabase for support of multi-agency /
multi-jurisdictional scenarios. GIS data is a key component of a PremierOne deployment and one
that is required. GIS provides the mechanism for location validation and recommendation for
response.

e A PremierOne conformant and geographically accurate GIS data is required for the proper
operation of PremierOne. It is the City’s responsibility to provide a complete and accurate GIS
data that conforms to the PremierOne GIS Data Requirements as noted in Error! Reference
source not found. for use in PremierOne. Each agency being added to PremierOne must have
their geographic coverage included in the geodatabase imported into PremierOne.

¢ The use of remote and/or Esri Online services is not supported. Motorola is not responsible for
map availability or any degradation of client performance caused by the use of third party hosted
internet map services; as these services are outside the domain of the PremierOne infrastructure
and are not managed by Motorola. PremierOne is a mission critical application that must control
the import/access of the GIS data.

PremierOne System Security

The PremierOne Suite is deployed within its own Microsoft Active Directory (AD) domain in its own
local area network. Active Directory Domain Controllers authenticate and authorize users to perform
actions within the domain making sure authorized users have appropriate access to data and services.

@ Motorola Solutions Confidential Restricted System Description 1-9

City of Glendale, AZ
September 5, 2019

1.2.3.3

1.3

The PremierOne user provisioning environment can be setup to query your AD environment (using
LDAP) allowing for a single point of user and password management across all applications.

The PremierOne network contains multiple virtual local area networks that are used to secure and
segment traffic for purposes of user access as well as data storage and replication. PremierOne
architecture resides behind dual redundant firewalls to protect the PremierOne network from
unauthorized intrusion and security threats. These firewalls are provisioned in a high availability
configuration so if either of the two fails, traffic and security will remain intact across the other.

Microsoft Reporting Services

PremierOne uses Microsoft SQL Server 2017 Reporting Services (SSRS) for reporting purposes.
SQL Server 2017 Reporting Services is a server-based reporting platform that is used to create and
manage tabular, matrix, graphical, dashboards, and free form reports that contain data from relational
and multidimensional data sources. The reports can be viewed and managed via a browser.

PremierOne also fully supports the use of Crystal Reports. The PremierOne Report Data Warehouse
(RDW) contains Criminal Justice Information System (CJIS) compliant data for the purposes of
report generation. The PremierOne CAD RDW is designed with views that are available for access by
Crystal Reports.

CJIS AND COMPLIANCE

PremierOne, when combined with the City's policies assist the City in meeting the CJIS requirements
of the State.

As a mission critical application, PremierOne is designed to be deployed within a secure
environment. Motorola’s PremierOne CAD and Mobile supports FIPS 140-2 encryption for enhanced
data security using Microsoft encryption libraries. CAD call data communicated between the client
and server is encrypted to FIPS 140-2 compliance.

PremierOne utilizes Windows Server 2016 Enhanced Cryptographic Provider (RSAENH) by
Microsoft Corporation, which has been certified by the National Institute of Standards and
Technology (NIST). The NIST Certificate Number is #1894, Some of the features in PremierOne that
support CJIS Security Requirements include:

e FIPS 140-2 compliant SHA256/RSA4096 certificates for Client to server communication and
encryption.

e AES 128 or AES 256-bit encryption in mobile over the air transport.
e AES 256-bit encryption in CAD client transport.

¢ FIPS 140-2 compliant SHA256 or SHAS12 hashing and AES encryption throughout the entire
application Allowing PremierOne to work on Windows computers with FIPS-compatibility
policy turned on — both servers and clients.

¢ Provides the ability to secure all web traffic to and from the solution with a FIPS Compliant TLS
1.2 SSL certificate which can be linked to a public key infrastructure (PKI).

¢ Removing all CJIS information from the device at logoff

1-10 Table of Contents Motorola Solutions Confidential Restricted ()

1.3.1.1

1.4

1.4.1

City of Glendale, AZ
September 5, 2019

e Audit Logging

e System Reports such as - Interface Query Summary Report, Login and Logoff Report, Mobile
Query Report, Officer Activity Report, and the Purged Records History Report

PremierOne Handheld Specific CJIS Security Requirement Compliance

PremierOne Handheld supports the CJIS Security Requirements for FIPS 140-2 encryption, audit
logs, device swipes, and inactivity locks.

SYSTEM PLATFORM AND COMPONENTS

This section discusses the hardware, operating system, and system software of the PremierOne
solution.

Note: It is the responsibility of the City to provide any specialized hardware and installation to ensure
compliance with any local, State or Federal natural disaster s regulations.

PremierOne Servers

The PremierOne hardware solution utilizes HPe servers as physical hosts.
Host servers are HPe DL360c Gen 10 servers configured with:

Dual 12-Core Intel® Xeon® Gold 6146 processor, running at 3.2 GHz, with a 25 MB L3 Cache
Each server also contains direct attached storage in the form of two 8 GB micro SD hard drives
with Smart Array controllers in a RAID configuration

¢ Four (4) - 10 Gigabit network ports

e Each server is configured with 384 GB RAM

The Monitor server is HPe DL360c Gen10 server configured with:

* Single 10-Core Intel® XeonS* 4114 processor, running at 2.2 GHz, with a 13.75 MB L3 Cache

e Each server also contains direct attached storage in the form of five 1.2 TB 10,000 RPM SAS
hard drives with Smart Array controllers in a RAID configuration

e Four (4) — 1 Gigabit network ports

e Each server is configured with 128 GB RAM.

¢ SolarWinds Network Performance Monitor and Traffic Analyzer Module.

PremierOne Storage and Backup

PremierOne’s Backup and Recovery subsystem includes online storage and a means to back up the
system offline through Nimble Storage and HPe StoreOnce disk arrays. Our solution design provides
storage area arrays that are utilized by the host servers for storage and for online backups with near
real-time data recovery.

Nimble Storage

The Nimble Storage HF20 Adaptive Flash array delivers sub-millisecond response times make the
HF 20 ideal for mixed or mainstream workloads requiring high performance. The HF20 can scale
from 13 TB to over 1.9 PB of effective capacity. The HF20 can be non-disruptively scaled-up all the
way to over 2.3 PB of effective capacity. Performance can be scaled independently of capacity to

@® Motorola Solutions Confidential Restricted System Description 1-11

City of Glendale, AZ
September 5, 2019

1.4.2

flexibly match workload and capacity requirements. Adaptive Flash arrays automatically optimize for
capacity and performance, while allowing you to change the service level of any volume.

The Nimble Storage HF Series SAN provides 42 TB of RAW storage. This storage is comprised of
twenty-one 2 TB HDD along with three 1920 GB SSD (5.8 TB flash) iSCSI connected drives.

HPe StoreOnce Backup

The PremierOne solution includes an HPe StoreOnce Enterprise-class Backup and Recovery system.
This system uses backup to disk and data deduplication techniques to enable high-speed backup of
Big Data sets. The HPe StoreOnce is controlled by an application server running HPe Data Protector
software for the purposes of application and database server backup and recovery. In addition, this
backup solution provides mechanisms for data encryption for offsite storage as needed. Best Practices
and Motorola recommendation are to locate this device in an alternative geo-diverse location from the
PremierOne system.

Ancillary Components
FortiGate Network Devices

Component isolation provides reliability, availability and performance. The solution is based on
FortiGate devices to provide the perimeter network router, firewall and Virtual LAN (VLAN)
configurations for the PremierOne solution.

Extreme Networks ExtremeSwitching

The ExtremeXOS modular operating system supports intelligent Layer 2 switching, Layer 3
IPv4/IPv6 routing, as well as role-based policy capabilities.

The ExtremeSwitching X620 is a compact 10 GB Ethernet switch designed for 10GB edge
applications. The family includes 10-port and 16-port 10 Gbe versions — all in a small 1RU form
factor — ideal for high-performance workgroups requiring 10GB connectivity to servers, storage and
clients.

The ExtremeSwitching X460 is a compact 10/100/1000 MB Ethernet switch. This switch is included
to provide network connectivity to non 10GB activities.

F5 BigIP Application Delivery Controllers

The solution consists of a virtual Application Delivery Controllers (ADC) for the PremierOne system.
These are purpose built appliances that reside outside of the application servers that present a “virtual
server” address to the outside world. Upon user connection, these appliances will forward the

connection to the most appropriate real server using bi-directional network address translation (NAT),

SolarWinds System/Network Management Tools

The solution consists of a dedicated virtual server to host an instance of the SolarWinds management
tools. SolarWinds is setup to monitor and log traffic flow data through the FortiGate firewalls and
load balancers through the server side network interface cards. Additionally, it monitors and logs
CPU and memory utilization on the switches and firewalls as well as the hardware layer for the server
hosts in the solution. Monitoring occurs at both the primary site as well as the DR site. As part of the
firewall, monitoring it also indirectly monitors the WAN link for replication. This data provides the
Motorola support teams with the information necessary to support the system and provide historical
measurements of system performance.

1-12 Table of Contents Motorola Solutions Confidential Restricted TAA)

City of Glendale, AZ
September 5, 2019

City of Glendale, AZ
PremierOne Rack Diagram

NetClock 9483

| _ >) Fortigate FG FW

Cable management over tap of
etches centered Benn ee”
| rows. Cable management for

oe Feemal imenedatah below

score PW

Summit X620 and

Extreme Networks
Summit X420

TFT7600 KVM Console

Nimble HF 20 SAN with
42TB of Storage and

5.8TB Flash

HP DL360 G10 Servers ‘a
2x12 CPU with 386GB +
of RAM a

HP StoreOnce Disk Backup

Rack Front Rack Rear

Table 1-6 - Sample Hardware Rack Layout for Primary Site

Note: This is a representative diagram only final configuration will be determined during system
staging and is subject to change.

The City must provide access to the loading dock at the installation location for the delivery of
equipment and that a City resource is able to receive and secure the storage of equipment.
Additionally, a temporary staging area for the unpacking and assembly of equipment must be
provided.

The City is responsible for any accommodation necessary to provide clearance and access through
hallways, doorways, and elevators meeting or exceeding the specifications of the shipping
container/rack at all sites housing solution components.

1.5 TCP/IP NETWORK AND DATA CENTER REQUIREMENTS

1.5.1 Network Requirements

Motorola’s solution requires TCP/IP protocol for connectivity. All servers and workstations will
connect to the City’s existing network. The City will provide access to facilities and a dedicated
resource knowledgeable on the city’s WAN/LAN.

TAA) Motorola Solutions Confidential Restricted System Description 1-13

City of Glendale, AZ
September 5, 2019

The City will supply IP addresses and a mechanism for maintaining IP persistence. Desktop, Mobile,
and Handheld clients require a persistent IP address from the time the application is opened to the
time the application is closed.

PremierOne CAD Network Requirements

PremierOne is dependent on the City’s LAN for client workstation performance. The estimated
network requirement per CAD client with typical usage is 0.8 Mbps — 1.2 Mbps. The recommended
built-to bandwidth is 1.2 Mbps per workstation. Peak load events (e.g. login) require higher
bandwidth and higher bandwidth will generally be required for sites with higher quantities of users
and greater data intensive operations such as complex map annotation sets and map manipulation if
the data resides on the server. The bandwidth recommendations account for the operation of the LAN
client to “not exceed the values” with the map data being stored locally on the client workstation.
Additional bandwidth will be required for the transfer of large multi-media files, premise hazard data
files and other large attachments.

Network latency plays a key role in the responsiveness of CAD client operations. PremierOne is
designed for optimal use on a local network environment where latency is very low. It is important
that efforts be made to provide the lowest latency possible between the PremierOne CAD servers and
each PremierOne CAD client. PremierOne requires latency of no greater than 20ms round-trip from
the client to the servers and back.

PremierOne Mobile and PremierOne Records Mobile Network Requirements

Both PremierOne Mobile and PremierOne Records Mobile's functionality is designed for 3G and 4G
networks. 3G network connectivity is required but, 4G connectivity is highly recommended.

The City will need to provide 3G/4G wireless network infrastructure and connectivity with routing
between the Mobile clients and both the primary and as applicable, disaster recovery data centers.

PremierOne Records Network Requirements

PremierOne Records is dependent on the City’s LAN for client workstation performance. The
estimated bandwidth requirements between server and PremierOne Records client can vary based on
the activity of the user. It is when documents are being requested or submitted and searches are being
performed, is when network bandwidth is required. During data entry, network requirements are
minimal. Peak load events (e.g. login) require higher bandwidth and higher bandwidth will generally
be required for sites with higher quantities of users and higher frequency data intensive operations
including image display.

PremierOne Records Mobile Network Requirements

PremierOne Records Mobile's is designed for 3G and 4G networks. 3G network connectivity is
required and 4G connectivity is highly recommended. The City will need to provide 3G/4G wireless
network infrastructure and connectivity with routing between the Mobile clients and both the primary
and disaster recovery data centers. Mobile workstations require a persistent IP address from the time
the application is opened to the time the application is closed. A persistent IP address can be
accommodated in many ways including static IP, DHCP reservation, permanent DHCP lease, or with
middleware such as RadioIP and NetMotion. The City will need to supply IP addresses for Mobile
clients.

Motorola encourages the City to test and evaluate the level of service being provided by their carriers
on a regular basis to validate mobile applications be not affected by provider changes.

1-14. Table of Contents Motorola Solutions Confidential Restricted (Q)