SOURCES SOUGHT
D -- PKI Mature Integration
- Notice Date
- 4/15/2010
- Notice Type
- Sources Sought
- NAICS
- 541519
— Other Computer Related Services
- Contracting Office
- Department of Veterans Affairs;Technology Acquisition Center;260 Industrial Way West;Eatontown NJ 07724
- ZIP Code
- 07724
- Solicitation Number
- VA118-10-RQ-0304
- Response Due
- 4/22/2010
- Archive Date
- 6/21/2010
- Point of Contact
- Sarah H BasilottoContract Specialist
- E-Mail Address
-
Contract Specialist
(sarah.basilotto@va.gov)
- Small Business Set-Aside
- N/A
- Description
- Request for InformationPKI Mature Services This Request for Information (RFI) is to obtain market research only. The purpose is to collect information about organizations with proven expertise in Public Key Infrastructure (PKI) solutions. Information gathered from this RFI will help VA to mature its PKI capabilities within the organization. It is not VA's intent to publicly disclose vendor proprietary information obtained during this solicitation. To the full extent that it is protected pursuant to the Freedom of Information Act and other laws and regulations, information identified by a respondent as "Proprietary or Confidential" will be kept confidential. It is emphasized that this RFI is for planning and information purposes only and is NOT to be construed as a commitment by the Government to enter into a contractual agreement, nor will the Government pay for information solicited. Background Department of Veterans Affairs (VA) has a large and complex PKI environment along with complex PKI needs for the business. VA believes that these needs can only be adequately met by using very mature PKI capabilities via the approaches of auto-enrollment, user self service, and certificate lifecycle management. Because VA is a federal agency all PKI solutions for VA must comply fully with the Federal PKI Policy Authority's Common Policy. The full text of Common Policy can be found at http://www.idmanagement.gov/fpkipa/documents/CommonPolicy.pdf. All potential solutions for VA's PKI environment must be provided by a PKI shared service provider. A complete list of currently approved shared service providers can be found at http://www.idmanagement.gov/fpkipa/cpl.cfm. VA is a large organization with a large number of end entities. VA also has a very large and mature Active Directory infrastructure. VA Active Directory and PKI managers believe that a successful solution must be very tightly integrated with Active Directory and that the solution must instantiate the issuing CA's on Windows Server 2008 R2 servers which are joined to VA's Active Directory forest. Scope/Objectives The Department of Veterans Affairs is seeking an IT solution that meets VA's needs for auto-enrollment, user self service, and certificate lifecycle management. VA intends to meet these needs by having four (4) Microsoft Windows Server 2008 R2 servers act as issuing CAs subordinate to the chosen SSP's principle CA (PCA), these issuing CA's will be joined to the VA Active Directory forest. VA intends to achieve the goals of auto-enrollment, user self service, and certificate lifecycle management by using the rich set of PKI policy templates, group policy, and Microsoft's Certificate Lifecycle Manager. Technical Elements: A vendor's solution would necessarily have the following characteristics: 1. Non-Personnel entity certificates (NPE) a.Issues subordinate certification authority certificates to the VA Microsoft Windows 2008 R2 CA's identified earlier, for the purpose of issuing non-personnel entity certificates (NPE). b.Issuing CA's will exist on VA's premise, within the VA network boundaries. c.Delivers a feasible approach to ensure that the solution will successfully satisfy all Common Policy requirements and vendor-specific auditing and Certification & Accreditation requirements. The approach must address any additional complexities introduced into the system by the following: i.VA's requirement that the issuing CA(s) is/are joined to VA's Active Directory forest ii.Implications of Active Directory membership of issuing CA(s) for logical access to the issuing CAs and any segregation of duties to be identified. iii.Any complexities regarding physical access should the technical approach choose to locate the issuing CA's on VA premises for the purposes of high availability and low latency. RFI Response This request for information is used for information and planning purposes only and does not constitute a solicitation. In accordance with FAR 15.201(e), responses to this notice are not offers and cannot be accepted by the Government to form a binding contract. Any contract that might be awarded based on information received or derived from this market research will be the outcome of the competitive process. If interested please submit a capabilities statement that addresses the following: 1.Vendor Name and Address 2.DUNS Number, socio-economic status of company, including applicable North American Industry Classification System (NAICS) code(s) 3.Responder Point of Contact Name, Phone number, email address 4.Responses to the Technical Elements, Numbered as shown above. 5.Optional Narrative: 1000 words or less to address any other issues to be communicated to VA not explicitly addressed in the response framework above. Upcoming Events: Vendor Day tentatively schedule to take place in late April or early May 2010. Please monitor the FBO website for exact date and location. The information will be posted as it becomes available. Response Instructions: Responses are requested no later than close of business on April 22, 2010. The Point of Contact for responses is Sarah Basilotto, Department of Veterans Affairs Technology Acquisition Center, Phone 732-578-5463, Email sarah.basilotto@va.gov. Alternate POC is Anne Marie Vasconcelos at 732-578-5485, Email anne.vasconcelos@va.gov.
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/notices/07a2f052635515358d6c5913aed6804b)
- Record
- SN02123144-W 20100417/100415235225-07a2f052635515358d6c5913aed6804b (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |