Massachusetts Gaming Commission Testing and

---

Massachusetts Gaming Commission Testing and Certification of IGT’s Intelligen Central Monitoring System This is a request for response from MGC Certified Independent Testing Laboratories for testing and certification services. The Gaming Technology Laboratory for Massachusetts Gaming Commission needs a formal and detailed evaluation of MGC’s Central Monitoring Systems (CMS). IGT has been contracted by MGC to configure and install their Intelligen application and to operate it for the Commission. The Commission wants to ensure that the Intelligen system is providing accurate reporting from the Plainridge Park Casino Electronic Gaming Devices, and that the installation and configuration of the application is functioning as expected and as called for in the contract with IGT. MGC is requesting a detailed proposal to include all required tasks and the estimated hours for each task. The areas covered in the proposal should include the following: CMS Testing Requirements: 1. CMS a. Confirm that the MGC CMS provides a fully operational electronic gaming device (EGD) control system that has the capability of supporting up to the maximum number of slot machines as permitted under the Act, as amended; b. 20,000 Slot Machines 2. CMS Network a. Confirm that all EGD’s are connected to the CMS via IGT site controllers b. Ensure the CMS Network resides on its own separate, dedicated, redundant network 3. SAS Protocol Testing a. Confirm that CMS properly utilizes the widely accepted gaming industry protocols (SAS and G2S) to facilitate EGD communication of transactions at each game. 4. Command & Control a. Confirm that CMS provides information retrieval and EGD machine activation and disabling capabilities 5. Slot Machine Manufacturer Compatibility a. Confirm that CMS does not unduly limit or favor the participation of a vendor or manufacturer of a slot machine as a result of the cost or difficulty of implementing the necessary program modifications to communicate with and link to the CMS

Massachusetts Gaming Commission – RFR for CMS Testing

6. Slot Signature Checks a. Confirm that CMS provides program signature validation and auditing program capacity to ensure the integrity of EGD software and hardware b. Ensure that the all EGD signature checks are working accordingly 7. Massachusetts Gaming Commission (MGC) Network Operations Center a. Validate that CMS provides for a fully functional test system including a connection to the MGC’s Network Operations Center, Primary Data Center and Backup Data Center; 8. Invoicing a. Confirm that CMS a daily invoice report to facilitate the collection and disbursement of taxes and assessments as stated in the Gaming Act (Chapter 23K); 9. Progressive Slot Machines a. Confirm that CMS has the capability to support in-house and wide area progressive slot machines as approved by the MGC 10. In-House System Co-Existence a. Validate that CMS does not materially affect or impact Penn National Gaming’s slot management system (ACSC), independent player tracking systems (PUMA) and cashless technology as approved by the MGC 11. Meter Collection a. Confirm that CMS will not alter the statistical awards of slot machine games, as designed by slot machine manufacturers and as approved by the MGC b. Validate / ensure that all metering is being collected and processed accordingly by CMS 12. Network Devices a. Confirm that CMS infrastructure and topology provides redundancy so that each component of the network will be capable of being operated independently and to assure that all transactional data is captured and secured by the MGC if any component of the network, including the CMS, fails or cannot be operated for any reason as determined by the MGC b. Confirm that each CMS network device has redundancy and configured for automatic fail over 13. Site Controllers a. Ensure that CMS Site Controller have user activity logging or user history reporting capabilities b. Validate that CMS site controller(s) are able to keep slot’s operational for 24 hours at the facilities

2|Page

Massachusetts Gaming Commission – RFR for CMS Testing 14. System Tracking and Reporting Activity a. Ensure the CMS system tracks, logs and reports all user and administrative activity. This includes but not limited to user account changes, inactive users, active users and OS level account changes. b. Confirms that CMS has the ability to meet all reporting and control requirements as required by the MGC and defined in the application requirements documents. 15. User Names and Passwords Administration a. Verify the following criteria are being met: i. Must include at least one (1) number ii. Must be a minimum of 8 alpha characters in length iii. Characters must include upper and lowercase iv. Password must be changed every 90 days v. After 3 invalid logons the user account is locked out vi. All administrator activity must be logged and reported on b. Ensure MGC can administer all accounts and passwords 16. Time Server a. Validate that the CMS is synchronized to a time server. 17. System Signature Check a. Verify system signature functionality b. Confirm Checksum is created 18. Adjustment Functionality a. Verify manual adjustment functionality Once the evaluation is completed, the CITL will provide MGC a written report certifying all of the outline items of concern as well as any findings that are would materially impact the operation the CMS system for the purposes of regulation of EGD’s in accordance with MGC regulations - 205 CMR 143.00: Gaming Devices and Electronic Gaming Equipment.

3|Page