Inactive
Notice ID:HHSP233201900044G
INTENT TO AWARD A SOLE SOURCE. The U.S. Department of Health and Human Services (HHS), through the Program Support Center (PSC), Acquisition Management Services (AMS), intends to negotiate on a sole s...
INTENT TO AWARD A SOLE SOURCE. The U.S. Department of Health and Human Services (HHS), through the Program Support Center (PSC), Acquisition Management Services (AMS), intends to negotiate on a sole source basis with Entrust Inc., located at 5420 LBJ Freeway, Suite 300, Dallas, Texas, to modify delivery order HHSP233201900044G for the purchase of 4,200 additional Public Transport Layer Security (TLS) certificates. The statutory authority is 41 U.S.C. 3304(a)(1), as set forth in Federal Acquisition Regulation (FAR) 6.302-1, Only one responsible source and no other supplies or services will satisfy agency requirements. THIS IS NOT A SOLICITATION FOR COMPETITIVE PROPOSALS. NO SOLICITATION IS AVAILABLE; THEREFORE, REQUEST FOR SUCH DOCUMENT WILL BE CONSIDERED INVALID RESPONSES. These Public TLS certificates are noted as non-schedule items with open market pricing on the existing delivery order. These Public Transport Layer Security certificates support the HSPD-12 Personal Identity Verification (PIV) smart card capability in compliance with the Federal Common Policy Framework. The certificates are required to operate HSPD-12 compliant PIV cards and over 3,000 HHS.GOV internally and externally facing web pages. Continued implementation of HSPD-12 at HHS is a strategic initiative intended to enhance security, increase efficiency, reduce identity fraud, and protect personal privacy. The Program requires agencies to follow specific technical standards and business processes for the issuance and routine use of PIV card credentials including a standardized background investigation to verify employees’ and contractors’ identities. The development and provisioning of these TLS certificates is proprietary to the HHS HSPD-12 Certificate Authority (CA) which is delivered by Entrust. Entrust meets all the mandatory PKI service provider requirements. Entrust is an approved GSA PKI provider, cross-certified with the Federal PKI bridge. Entrust provides certificates and certificate maintenance activities to support the Program’s PIV smart card capability in compliance with the Federal Common Policy Framework. This framework provides guidance for the implementation of a PKI service to enable secure communication, authentication of entities and electronic content, and the exchange of secure attribute-level assertions. Entrust is certified by the Federal PKI Policy Authority as a PKI Shared Service Provider. Entrust provides open standard-compliant certificates, including PKI software certificates, Private Transport Layer Security certificates, and Public Transport Layer Security certificate. Entrust provides certificates and certificate maintenance activities to support the HSPD-12 PIV smart card capability in compliance with the Federal Common Policy Framework, inclusive of Public Transport Layer Security certificates. Entrust provides HHS with a seamless continuation of Public Key Infrastructure Services for the continued implementation of HSPD-12. HHS relies on PKI certificates for approximately 218,000 HSPD-12 compliant PIV cards and over 3,000 HHS.GOV internally and externally facing web pages that without Entrust support will be rendered inoperable and web pages inaccessible to employees, contractors and the general public. These Public Transport Layer Security certificates allow HHS to continue compliant maintenance of its public facing websites, as required by OMB M-15-13. THIS IS NOT A SOLICITATION FOR COMPETITIVE PROPOSALS. NO SOLICITATION IS AVAILABLE; THEREFORE, REQUEST FOR SUCH DOCUMENT WILL BE CONSIDERED INVALID RESPONSES. All responsible sources that have determined they meet the all mandatory PKI service provider requirements and are an approved GSA PKI provider, cross-certified with the Federal PKI bridge, may submit a capabilities statement. Capabilities statements should clearly indicate business size. The email subject line must reference “Public Transport Layer Security Certificates for the Continued Implementation of HSPD-12 (Modification).” All responses are due by June 3, 2020 at 11:00 am Eastern Time and sent to tory.estabrook@psc.hhs.gov. A determination by the Government not to compete this proposed modification is solely within the discretion of the government.
