This solution, provided as a service, includes a hardware device that must be integrated into the product (and included in the price), along with a license that meets the requirements established for category X: Cybersecurity, as well as encryption at rest to ensure the privacy of the data and documents stored on the device.

The subsidizable devices in this category of digitalization solution may include: new laptops or desktop computers, with refurbished devices not considered, and must have at least the following characteristics:

Minimum hardware device requirements

• Processor: The device's processor must have a minimum of 4 physical cores and a maximum clock speed (CPU clock) of at least 2.9 GHz (in turbo mode or equivalent). Its release date must be after the first quarter of 2023.

• Performance: The device's processor must have achieved a minimum score of 15,000 on PassMark Software, as of May 13, 2024.

• RAM: The device must have at least 16 GB of DDR4 memory or equivalent superior technology.

• Storage: The device must provide a minimum of 512 GB of internal SSD NVMe storage. All data and documents contained in the computer must be protected by encryption in rest to ensure their security. The encryption passwords must be provided by the Attached Digitalizer Agent to the beneficiary at the time of device delivery.

• Operating System: The operating system must be of a professional nature. It will be provided together with each device and will come pre-installed and factory licensed.

• Graphics Card: The device must have a dedicated or integrated graphics card, with a minimum Full HD resolution. In the case of a laptop, it must support the use of two monitors.

• Integrated Sound Card: The device must have an integrated sound card.

• Wireless Connectivity: The device must have an integrated wireless network card compatible with the Wi-Fi 6 standard or higher. It must also provide Bluetooth 5.1 or higher connectivity.

• Input/Output Interfaces: At least 2 USB 3.0 or higher Type A ports.
  At least 1 USB 3.0 or higher Type C port. For portable devices, at least one of them must have DisplayPort + Power Delivery + USB functions.
  One RJ-45 Ethernet port (1 Gbps).
  One HDMI port (1.4 or higher).
  Audio I/O: At least one 3.5 mm combo jack interface for headphones and microphone.

• In the case of laptops, providing the interfaces through docking station devices, port replicators, or similar is permitted.

• Screen: If the device is a laptop, it must have a minimum screen size of 13 inches.

• Keyboard: In the case of desktop computers, a Spanish keyboard must be provided to ensure the full functionality of the device.

• Mouse: An optical mouse equipped with at least two buttons and scroll function to ensure the full functionality of the device. In the case of laptops, an integrated mouse or touchpad is acceptable.

• Webcam: At least HD resolution. Integrated webcam with privacy shutter in the case of laptops.

• Battery: In the case of laptops, a smart battery or similar type.

• Smartcard Reader (DNI-e): A smart card reader that complies with the ISO-7816 standard. Integrated or non-integrated devices are acceptable.

• Certifications: Desktop and laptop computers must have at least one certification from the following types (or similar):
  ENERGY STAR®.
  EPEAT™ Silver Registered.
  TCO.

• Robustness: MIL STD 810H certification or equivalent. They must meet a minimum of 5 methods, including: high temperature, low temperature, and humidity.

• The equipment must comply with energy-related requirements established according to Directive 2009/125/EC for servers and data storage, or computers and computer servers, or electronic displays. The used equipment must not contain the restricted substances listed in Annex II of Directive 2011/65/EU, unless the weight concentration values in homogeneous materials do not exceed those listed in that annex. In these acquisitions, measures will be activated to ensure the purchase of energy-efficient equipment that is fully compliant with the “Code of Conduct for ICT” of the European Commission, and steps will be taken to enhance the durability, repairability, upgradability, and reusability of the products and the installed electrical and electronic devices. At the end of the useful life of the acquired digital technology, it must be treated in accordance with current legislation (including that the equipment will be subjected to preparation for reuse, recovery, or recycling operations, or adequate treatment, including the removal of all fluids and selective treatment according to Annex VII of Directive 2012/19/EU) and must not negatively impact environmental objectives.

• To facilitate support tasks, remote management of computer equipment through MDM solutions, device platforming, automatic recovery, or similar will be allowed, enabling remote management, restoration, and optimal operation of the equipment. In such cases, compliance with current data protection legislation and the guarantee of digital rights must be ensured, as well as the regulations applicable to these systems. The information collected in such cases will be the minimum necessary to provide support services.

In the particular case of desktop computers

Monitor: In the case of desktop computers, if there is no integrated monitor, a monitor must be provided that meets at least the following requirements:

• Size: The monitor must have a screen size of at least 23 inches.

• Resolution: The monitor must have a minimum resolution of Full HD.

• Display Technology: The monitor must utilize LCD, LED, or equivalent display technology.

• Interfaces: At least 1 HDMI port.

• Energy Label: The monitor must have the European Union energy label.

Minimum Security Requirements

• Secure Boot: The device will have protection measures for the boot process against security attacks through malicious code, such as Secure Boot or similar.

• TPM Chip, T2, or Similar, Depending on Platform: The device will include a TPM or T2 chip to strengthen system integrity, mitigate risks of cyber attacks, and provide a more solid foundation for security.

• Biometric Identification: The device will implement (via hardware or operating system) biometric security elements, such as a facial recognition camera or fingerprint reader, to enhance access security to the system.
  
  
  Advertising Requirements

  The device must have either an engraving or a label affixed to the laptop or the desktop and monitor (not on mice or keyboards). In the case of replacement, the new equipment must be labeled or engraved under the same conditions as the equipment it replaces. The composition must include the following logos:

• The emblem of the European Union (available at the link https://planderecuperacion.gob.es/identidad-visual), indicating "Funded by the European Union - Next Generation EU."

• The logo of the Recovery, Transformation, and Resilience Plan.

• The logo of the Ministry for Digital Transformation and Public Function.

• The logo of the Public Business Entity Red.es (It should appear as “Red.es”).

  
  

  Adhesive Label Option

The advisor will attach a visible adhesive label to each laptop or desktop computer and monitor on a surface with the following minimum technical characteristics

Material:

• Wear resistant.

• Water resistant.

• Solvent resistant.

• Light resistant.

• High temperature resistant.

• Abrasion resistant.

• High resistance to breakage.

Adhesive:

• Anti-vandalism adhesive.

• Permanent adhesive.

• Universal adhesive adaptable to different surfaces.

• Resistant to the passage of time.

• Resistant to temperatures from –40 °C to +145 °C. 
  
  

Impression:

• Logos supported.

• Long-lasting indelible ink.

   

Engraving option

As an alternative to placing labels, each laptop or computer + monitor may be identified by engraving on clearly visible surfaces, using indelible methods that cannot be separated from them. The supported procedures are pantography, die-cutting, thermal engraving or laser engraving. Any other method will require prior approval by Red.es

The Digitizing Agent must provide a Maintenance and Support service from the delivery of the devices that make up the solution, until the completion of phase 2 execution:

Minimum requirements for the maintenance and support service

Minimum requirements of the cybersecurity solution

• Antimalware: The solution should provide a tool that scans the device, its internal memory, and external storage devices.

• Antispyware: The solution will need to provide a tool that detects and prevents spy malware.

• Secure Email: The solution must provide email analysis tools with the following features:

  • Anti-spam, with spam detection and filter.

  • Antiphishing, with detection of emails with links or malware that are suspected of being used to steal credentials.

• Safe browsing: content control and anti-adware to avoid malicious ads.

• Analysis and detection of threats: the solution must allow knowing the behavior of known and new threats.

• Network monitoring: The solution should provide tools that analyze network traffic and warn of threats.

• Initial configuration and security updates: an initial configuration must be performed for correct use, with the respective updates of malware signatures and other data for threat detection in addition to the required periodic security software updates.

• Special training requirements: In addition to the common training requirements, the training provided to the beneficiary must include a tutorial for the configuration of the security software, as well as include a cybersecurity awareness kit to complement the solution with human firewall skills.
  
  

  Possibility of acquiring associated hardware.

Once phase II of the service is completed, the beneficiary may acquire ownership of the hardware, upon payment to the Adhered Digitizing Agent of the residual value of the equipment.

The Adhering Digitizing Agent is obliged to offer the option to purchase a Secure Work Position to the beneficiary. In the event that the beneficiary does not pay the agreed residual amount, the Affiliated Digitizing Agent may recover the equipment.

The Adhering Digitizing Agent must inform the beneficiary of the purchase value of the equipment at the end of the 12 months of service provision corresponding to Phase II. This amount that the beneficiary must pay will be the acquisition value of the equipment and must be reflected in the Digitalization Solutions Provision Agreement. At most, the amount of the purchase value will be 15% of the amount of the signed agreement (solution amount).