Abschluss von Rahmenvereinbarungen über die Lieferung von einer schlüsselfertigen PKI-Lösung für die Polizei NRW

The contract timeline is as follows:

The contract officially commences with the award of the contract based on the contractor's offer. It is valid for a total duration of 5 years from this commencement date.

Key milestones and phases include:

• Creation and Provision (Bereitstellung zur Abnahme - BzA): This phase is scheduled to be completed 8 weeks after the contract award.
• Parallel Productive Operation (Vertragserfüllungstermin* (Abnahme) - VE): This phase will run until January 1, 2027.
• Maintenance (Pflegeleistungen): The maintenance period will last for a minimum of 60 months. This period begins either the day after the warranty period for material defect claims expires or the day after acceptance.

The core scope of work for this tender is the procurement and delivery of a turnkey PKI (Public Key Infrastructure) solution based on hardware appliances. This solution is intended for the manual and automated provision of digital certificates for internal use by the Polizei NRW.

The Statement of Work summary and core deliverables include:

• The creation and permanent transfer of individual software.
• The transfer of standard software against a one-time fee.
• Adaptation of software at the source code level.
• Customizing of software.
• Training services.
• Post-acceptance services, including maintenance (troubleshooting and/or delivery of new program versions), further development, and adaptation.
• The solution must be an All-In-One appliance, operable without additional servers or system components.
• It must be deployable in data center racks.
• Administration and all services must be accessible via the internal network of the Polizei NRW, requiring a separate network connection for administration.
• Operation, licensing, updates, and support must be possible without internet or cloud access.
• The system needs to be capable of creating and managing a minimum of 1,000,000 digital certificates.
• Automated certificate provision must support SCEP, EST, CMP, and MSAE protocols.
• Technical functions for high availability and fault tolerance are required to ensure continuous service availability even if a component fails.
• The system must incorporate a Hardware Security Module (HSM) with 8 certificate slots.
• Both the system and the HSM must support modern algorithms for Post-Quantum Cryptography (PQC).
• Service and support encompass general support, updates, troubleshooting assistance, providing log files and system dumps, allowing physical access to systems, and facilitating data carrier exchange.