Objectives

The primary objective of this tender is to appoint a suitable service provider to implement a comprehensive Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) system for SAMSA. The solution aims to enhance cybersecurity by providing encrypted communications, data confidentiality, and integrity. The service includes provisioning, maintenance, support, and skills transfer to SAMSA ICT personnel for effective management of the PKI and CLM systems over a period of one year.

Scope

The scope encompasses the procurement, deployment, and support of PKI and CLM solutions, including:

• Provisioning of a publicly trusted Certificate Authority (CA) capable of issuing various certificates (e.g., SSL, S/MIME, Wildcard, Private).
• Implementation of comprehensive key management capabilities, including key rotation and security.
• Automated certificate issuance, renewal, validation, revocation, and destruction processes.
• Integration of cryptographic hardware security modules (HSM) for enhanced security.
• Provision of reporting, auditing, and compliance features.
• Training and skills transfer to SAMSA ICT staff for ongoing system administration and operation.
• Support and maintenance for a period of one year post-deployment.

Technical Requirements

The technical specifications include:

• Provision of a fully functional PKI system with a trusted CA capable of issuing multiple types of certificates.
• Support for both public and private certificates, including SSL, S/MIME, multi-domain, wildcard, and private certificates.
• Comprehensive key management features, including secure key storage, rotation, and lifecycle management.
• Automated processes for certificate lifecycle management: issuance, renewal, validation, revocation, and destruction.
• Integration with cryptographic hardware security modules (HSM) for key protection.
• Reporting and auditing capabilities to ensure compliance and traceability.
• Provision of a secure, scalable, and compliant infrastructure adhering to relevant data security and privacy regulations.
• Mandatory accreditation from SECTIGO or DigiCert, with valid certification submitted as part of the bid.

Skills Requirements

The successful bidder must demonstrate:

• Technical expertise in deploying and managing PKI and CLM systems.
• Experience with cryptographic hardware security modules (HSM).
• Capability to provide comprehensive training and skills transfer to SAMSA ICT personnel.
• Proven ability to deliver secure, compliant, and scalable cryptographic solutions.
• Availability of qualified personnel with relevant certifications and accreditation in PKI and cryptography.
• Capacity to provide ongoing support, maintenance, and system updates during the contract period.