Pipeline Framework: PKIaaS

A pipeline has been launched for PKIaaS.The contract start Date is 29 November 2024. Approach to market date is 30 April 2024.NOTICE ONLYThe current FCA PKI service utilises multiple processes and manual intervention making the process slow and inefficient. A robust PKI service is crucial for maintaining trust, security, and privacy in digital communications by effectively managing cryptographic keys and certificates.The FCA is seeking to procure a Public Key Infrastructure as a service (PKIaaS) solution to provide central key and certificate management across the FCA estate as well as support end user devices and TLS. There is a requirement to establish ownership for the PKI service to increase transparency and provide accountability. The introduction of a PKIaaS will enable the FCA to move away from a localised PKI. There will be a requirement to rollout a cloud-based PKIaaS with integrated lifecycle management with a dedicated offline root Certificate Authority (CA) with certificate issuing capability. The certificates for public-facing websites will be integrated with PKIaaS and processes for automated certificate management developed. The solution must support integration with Intune, AzureAD Single Sign On, and FCA PAM solution.This is a potential opportunity from the government, and the pipeline gives advance notice of an opportunity that might be offered by the public sector in the future – allowing potential suppliers to plan accordingly. When a public sector organisation publishes a pipeline notice, it does not necessarily mean that an opportunity will be offered in the future.For more information contact: Financial Conduct Authority, 12 Endeavour Square, London E20 1JN. Tel: 0800 111 6768. Email: fcaprocurement@fca.org.uk (FCA Procurement)