Zakup usługi wsparcia i utrzymania posiadanego systemu PKI na okres 36 miesięcy oraz jego rozbudowa o architekturę wysokiej dostępności (HA)”

The contract timeline is as follows:

• Contract Start Date: Not explicitly stated as a calendar date, but durations are relative to "the date of concluding the Agreement" (dnia zawarcia Umowy).
• Contract End Date: Not explicitly stated as a calendar date.
• Total Duration: The delivery, configuration, and launch of the IT system are specified for a period of 36 months. This includes all updates and manufacturer support.
• Key Milestones/Phases:
• Software Implementation (Wdrożenie Oprogramowania): The Contractor is obliged to perform the Software Implementation in stages within a period not exceeding 45 working days from the date of concluding the Agreement.
• Software Implementation (Wdrożenie Oprogramowania) Initial Stage: The Contractor is obliged to perform the Software Implementation in stages within a period not exceeding 10 working days from the date of concluding the Agreement, during which the Contractor will submit the Technical Project along with the Implementation Schedule for the Employer's acceptance.
• Submission of Technical Project and Implementation Schedule:
• Within 5 working days from the date of concluding the Agreement.
• Within 3 working days from the date of concluding the Agreement.
• Phase 1 (ETAP 1): Analysis of requirements, analysis of the existing environment, development of the concept for expanding the Software with high availability (HA) architecture, and pre-implementation project.
• Phase 4 (ETAP 4): Post-implementation documentation and administrative and maintenance procedures.
• Phase 5 (ETAP 5): Conducting instruction for a minimum of 3 working days covering the implemented Software for 6 administrators and business users.
• Employer's Verification: The Employer will verify documents submitted at each stage of the Implementation, including the Technical Project and Post-Implementation Documentation, and report any reservations within 10 working days of receipt.
• Contractor's Corrections: The Contractor is obliged to address the Employer's reservations and submit corrected documents within 3 working days from the date of receiving the reservations.
• Possible Extension of Deadlines: In justified cases, due to lack of documentation or information from the Employer, or additional activities required for Implementation, the Contractor may request an extension. The Employer may postpone the deadline for up to 30 working days.

The core scope of work for this tender involves the purchase of support and maintenance services for an existing PKI system for a period of 36 months, along with its expansion to include a High Availability (HA) architecture.

The key components and deliverables of the Statement of Work can be summarized as follows:

1. Software Expansion and Licensing:

• Expansion of the existing PKI KeyFactor EJBCA Enterprise software to a High Availability (HA) architecture.
• Provision of necessary licenses/licensing rights for the expanded HA version of the software.
• Delivery, configuration, and launch of the offered IT system or an equivalent solution for 36 months, including all updates and manufacturer support.

2. Implementation (Wdrożenie):

• Conducting the implementation on a hardware-application platform at the client's location.
• Agreement with the client on an Implementation Schedule.
• Preparation and delivery of a Technical Project, an Acceptance Test Plan, and post-implementation documentation in electronic form.
• Ensuring continuous operation of the client's IT systems during implementation.

The implementation process is divided into several stages:

• Stage 1: Requirements Analysis, Environment Analysis, Software Concept, and Pre-implementation Project. This includes technological instruction, analysis of client needs and environment, development of software architecture, and preparation of the hardware-software platform for the software (physical and virtual machines) up to the installed operating system level. The contractor is responsible for the installation, configuration, and launch of all necessary components for the HA architecture.
• Stage 2: Environment Preparation, Software Component Installation, Basic Configuration, System Integration, and Testing. This involves installing software components, implementing the second node and HA cluster configuration, integrating with cooperating systems (AD, SIEM, SMTP, CyberArk, Splunk Enterprise Security, Microsoft Defender, Cisco ISE, BigIP F5), and automating 10 scenarios using agreed playbooks. Acceptance tests will be performed to confirm project assumptions and correct software operation, including issuing, renewing, and revoking certificates, verifying HA functionality (failover without service interruption, data consistency), SCEP protocol handling, and scalability (min. 100,000 certificates).
• Stage 3: Migration. This includes migration of the PKI hierarchy (Root CA, Subordinate CA/Issuing CA), certificate authority configurations (profiles, templates, issuance policies, CRL configuration), data related to issued certificates (active, revoked, operation history), RA and SCEP service configurations, and re-establishment of existing integrations with external systems. A detailed migration plan must be submitted.
• Stage 4: Post-implementation Documentation and Administrative/Maintenance Procedures. This involves creating and submitting plans and procedures for software restoration, post-implementation documentation in Polish, administrative and maintenance procedures for account configuration and management, and a certificate confirming the right to use the license.
• Stage 5: Training. Conducting at least 3 working days of training on the implemented software for 6 administrators and business users, including preparing scenarios, environment, and resources, and providing a recording of the administrator training.

3. Technical Assistance Service:

• Provision of Technical Assistance Service for the software for 36 months, including maintenance.
• This service encompasses the right to use the software in its current version with all updates and the ability to use software support (Service Care).

4. Documentation and Intellectual Property:

• Transfer of proprietary copyrights for the documentation developed by the contractor within the framework of the agreement to the client.
• Delivery of post-implementation documentation in electronic form.
• Delivery of a certificate confirming the right to use the license and system documentation for the software.The core scope of work for this tender is the purchase of support and maintenance services for an existing Public Key Infrastructure (PKI) system for a period of 36 months, combined with its expansion to include a High Availability (HA) architecture.

The high-level summary of the Statement of Work and core deliverables includes:

• Software Expansion and Licensing: Expanding the client's current PKI KeyFactor EJBCA Enterprise software to a High Availability (HA) architecture and providing all necessary licenses for this expanded version for 36 months.
• Implementation (Wdrożenie): Conducting a comprehensive implementation on the client's hardware-application platform. This involves agreeing on an Implementation Schedule, preparing and delivering a Technical Project, an Acceptance Test Plan, and post-implementation documentation in electronic format. The implementation must ensure the continuity of the client's IT systems.
• Phase 1: Analysis and Pre-implementation Project: Includes technological instruction, analysis of client needs and environment, development of software architecture, and preparation of the hardware and software environment for the HA architecture, including installation, configuration, and launch of all solution components.
• Phase 2: Environment Preparation, Installation, Configuration, Integration, and Testing: Involves installing software components, deploying a second node and configuring the HA cluster, integrating the software with cooperating systems such as Active Directory (AD), Security Information and Event Management (SIEM), Simple Mail Transfer Protocol (SMTP), Cyber Ark, Splunk Enterprise Security, Microsoft Defender, Cisco ISE, and BigIP F5. This phase also includes automating 10 scenarios using agreed playbooks. Acceptance tests will verify the correct operation of the software, including certificate management, HA functionality, SCEP protocol handling, and scalability.
• Phase 3: Migration: Encompasses the migration of the PKI hierarchy (Root CA, Subordinate CA/Issuing CA), certificate authority configurations, issued certificate data, RA and SCEP service configurations, and re-establishing existing integrations. A detailed migration plan is required.
• Phase 4: Post-implementation Documentation and Procedures: Developing and submitting plans and procedures for software recovery in case of failure, providing post-implementation documentation in Polish, establishing administrative and maintenance procedures for account management, and issuing a certificate confirming the right to use the license.
• Phase 5: Training: Providing at least three working days of instruction on the implemented software for six administrators and business users, including scenario development, environment preparation, and recording of administrator training.
• Technical Assistance Service: Providing technical assistance and service care for the software for a period of 36 months. This includes ensuring the right to use the current software version with all updates and access to manufacturer support.
• Intellectual Property: Transferring proprietary copyrights for all documentation developed by the contractor as part of the agreement to the client.
• Documentation Delivery: Delivering the post-implementation documentation and a certificate confirming the right to use the license along with system documentation for the software.