Objectives

The primary objective of this tender is to procure and implement a comprehensive Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) services for a period of one year. The solution aims to enhance cybersecurity by providing cryptographic security, data confidentiality, and integrity through PKI, along with automated certificate management via CLM, including issuance, renewal, revocation, and destruction of certificates. The service should also include maintenance, support, and skills transfer to SAMSA ICT personnel to ensure proper system administration.

Scope

The scope encompasses the delivery of fully functional PKI and CLM products and services, including:

• Provisioning of a publicly trusted Certificate Authority (CA) capable of issuing various certificates (e.g., domain, wildcard, private).
• Implementation of comprehensive key management capabilities.
• Automated certificate lifecycle processes such as issuance, renewal, validation, revocation, and destruction.
• Provision of cryptography solutions, including Hardware Security Modules (HSM) for key protection.
• Reporting and auditing functionalities for compliance and security monitoring.
• Training and skills transfer to SAMSA ICT staff for ongoing system management.
• Support and maintenance for the entire PKI and CLM infrastructure for one year.

Technical Requirements

The technical specifications include:

• Provision of a publicly trusted CA capable of issuing various certificate types.
• Comprehensive key management features, including secure storage and rotation.
• Integration of cryptography hardware, such as HSMs, for enhanced security.
• Automated certificate lifecycle management, including issuance, renewal, validation, revocation, and destruction.
• Reporting and auditing capabilities for compliance and security oversight.
• Provision of training and knowledge transfer to SAMSA ICT personnel.
• Submission of valid accreditation certificates from SECTIGO or DigiCert, demonstrating compliance with industry standards.

Skills Requirements

The successful bidder must demonstrate:

• Technical expertise in PKI and CLM deployment and management.
• Experience with cryptography hardware, particularly HSMs.
• Capability to provide comprehensive training and skills transfer to SAMSA ICT staff.
• Ability to deliver a secure, compliant, and fully operational PKI/CLM system.
• Valid accreditation from recognized authorities such as SECTIGO or DigiCert.
• Proven track record in implementing similar cryptographic security solutions.