How to Choose the Right Hardware for Idaho Manufacturers and Mid-Sized Businesses

If you've been putting off a hardware refresh, October 2025 may have finally forced the decision. Windows 10 reached end of life — no more security patches, no more updates. Any machine still running it is now an unpatched endpoint sitting on your network. For businesses with 30, 60, or 150 workstations, that's not a small problem.

Hardware decisions feel expensive and complicated, which is why they get deferred. This post breaks down what actually matters when you're choosing equipment — workstations, servers, network gear, and physical security systems — for an operation where downtime costs real money.

Workstations and endpoints

The biggest mistake in workstation purchases is buying to today's minimum requirement. Software gets heavier every cycle. An ERP update, a new CAD version, or adding remote access tools to a machine that was already at its limit will make it feel five years old in eighteen months.

What to actually spec for:

• Processor: Current-generation Intel Core i5/i7 or AMD Ryzen 5/7 for standard office and ERP workloads. If your team runs CAD, rendering, or simulation software, step up to i7/i9 or Ryzen 7/9 with dedicated GPU.
• RAM: 16GB minimum. 32GB for CAD, engineering software, or anyone running multiple applications simultaneously. The cost difference is small; the performance difference is not.
• Storage: SSD, not spinning disk. If you're still buying HDDs for workstations in 2025, you're building in slowness from day one.
• Security compatibility: Any new endpoint should support your EDR platform and full-disk encryption (BitLocker on Windows Pro/Enterprise). If you're pursuing CMMC, your endpoint selection needs to align with your compliance requirements.

For businesses replacing Windows 10 machines: this is the right time to standardize. Rather than replacing machines one at a time as they fail, a planned replacement cycle by department lets you standardize on one hardware configuration, simplify support, and negotiate better pricing.

Network infrastructure

Your network is what everything else runs on. Upgraded workstations won't help if the network underneath them can't keep up.

For manufacturing and operations environments, network design is more complex than a standard office. You may have separate VLANs for office systems, production floor equipment, and guest/vendor access. You may have PLCs, CNC machines, or SCADA systems that need network connectivity but can't be treated the same as a workstation. The physical environment — concrete walls, large open areas, metal interference — creates real Wi-Fi challenges.

Signs your network equipment needs attention:

• Users in certain areas of the building consistently experience connectivity issues
• You've added devices (cameras, mobile scanners, tablets on the floor) without redesigning the wireless coverage
• Your switches are unmanaged, meaning you have no visibility into what's on your network or what it's doing
• Your firewall is more than 5 years old and no longer receiving firmware updates

Modern network infrastructure for a mid-sized operation should include managed switches (so you can see and segment traffic), business-grade access points designed for high-density or industrial environments, and a firewall with active threat filtering — not a consumer router running your business.

Servers: replace, refresh, or move to hosted

If you're running aging on-premise servers, you have three realistic options when they need to be replaced.

Refresh the hardware. Buy new servers, migrate your data and applications, and continue running on-site. This makes sense if you have compliance requirements that mandate on-premise data storage, applications that won't run in the cloud, or specific latency needs (some manufacturing systems need local processing speed that cloud introduces latency to).

Move to hosted infrastructure. Rather than buying new servers, host your data and applications in a local data center. TotalCare operates local cloud hosting infrastructure in Boise — your data stays in-state, response times are fast, and you eliminate the hardware ownership burden (no more worrying about the server nobody wants to touch in the back room). This is a strong option for businesses whose on-site servers are primarily running file storage, line-of-business applications, or backup targets.

Hybrid. Keep some systems on-site (manufacturing execution systems, anything with low-latency requirements) and move others to hosted infrastructure (file servers, email, backup targets). This is increasingly common for manufacturers who have some cloud-ready workloads and some that aren't.

The decision isn't purely technical — it factors in your applications, your compliance posture, your IT capacity, and your appetite for managing hardware. A technology alignment review is the right way to think through it before committing.

Physical security systems: cameras, access control, and why IT needs to be involved

Physical security hardware is often purchased separately from IT — a different vendor, a different budget, a different decision-maker. That creates a problem: IP cameras, access control systems, and NVRs run on your network, and if they're not set up correctly, they're a security vulnerability.

The 2021 Verkada breach, where attackers gained access to 150,000 cameras at hospitals, factories, and jails through a single compromised credential, is the most cited example. But misconfigured IP cameras showing up in vulnerability scans is a routine finding — default credentials, no network segmentation, exposed management interfaces.

For manufacturers and operations-heavy businesses, physical security hardware typically includes:

IP cameras and NVR/VMS systems. Modern IP cameras are network devices. They need to be on a segmented VLAN, not the same network as your workstations and servers. They need strong credentials, firmware updates, and access controls. When purchasing, choose a system where the vendor provides ongoing firmware support — many budget camera brands stop updating their software within a year or two.

Access control. Badge readers, electronic door locks, and access control panels for restricted areas (server rooms, production areas with sensitive materials, loading docks). For defense manufacturers, documented physical access controls are often a CMMC requirement. Access logs should be retained and reviewable.

Remote monitoring capability. Most modern systems allow authorized users to view cameras and access logs remotely. This needs to be set up through a VPN or secure portal — not a camera system that punches a hole through your firewall to the internet.

Integration with IT infrastructure. The power and network runs for cameras and access control systems need to be planned alongside the IT infrastructure. PoE switches that power cameras, cable runs, conduit in production areas — these decisions should happen before walls are finished, not after.

If you're building out or upgrading a facility in the Treasure Valley or East Idaho, involving your IT provider in the physical security planning conversation saves significant cost and avoids the common outcome of having cameras installed that can't be properly secured.

Making the call

Hardware decisions at the 30–200 employee scale aren't just purchasing decisions — they're architectural decisions that affect your operations for the next 3–5 years. The cost of making them reactively (replacing machines when they fail, adding network gear when coverage becomes a complaint, addressing physical security after an incident) is almost always higher than planning them.

TotalCare's Technology Alignment process is built around this kind of planning — reviewing what you have, understanding where the gaps are, and building a multi-year roadmap so hardware investments are predictable rather than reactive.

If you're dealing with Windows 10 machines that need to be replaced or servers that are aging out, get in touch and we can walk through the options for your specific setup.