CORE & MAIN LP (#2027021) - Laserfiche WebLink

RFP-2 – Scope of Work RFP# PWD 25.604 City of Pleasanton, CA RFP-2 | Page 1 Internal Use Only APPENDIX A City of Pleasanton AMI System Implementation Data Transfer Specifications Scope of Work Addendum RFP Reference:RFP #PWD-25.604 —CIP 26137 Document Date:April 7, 2026 Prepared By:Allen Hammond, IT Director, City of Pleasanton Reference:CUS Exceptions Summary, Data Transfer Items (Exceptions 4–8) Contractor:Core & Main LP / Concord Utility Services (CUS) 1. Purpose This document establishes the data transfer specifications and technical requirements for the bidirectional exchange of data between the City of Pleasanton ("City") and Core & Main LP / Concord Utility Services ("CUS") during the AMI system deployment under RFP #PWD-25.604. These specifications supplement the contract exceptions negotiated in the CUS Exceptions Summary (rows 34–38) and shall be incorporated into the final Scope of Work. The City's enterprise billing and customer information system is Tyler Munis. All data exchange processes described herein must support integration with Tyler Munis as the system of record for customer accounts, meter inventory, and billing data. 2. SFTP Infrastructure Requirements Ref: CUS Exception 4 — SFTP file transfer is an adequate means of transferring data between parties. 2.1 Transport Security •All SFTP connections shall use SSH protocol version 2 with a minimum key length of 2048-bit RSA or equivalent (e.g., Ed25519). •Key-based authentication is required. Password-only authentication is prohibited. •TLS 1.2 or higher shall be enforced for all data in transit. •CUS shall provide IP whitelisting capabilities to restrict SFTP access to City-authorized IP addresses. 2.2 Data at Rest •All files residing on the SFTP server shall be encrypted at rest using AES-256 or equivalent. Docusign Envelope ID: 6AD75F50-8A33-85A5-8039-9E3E1257A838Docusign Envelope ID: 177582DA-4F1C-8834-813C-BC4FD03AA45E