RFI for digital certificates
The Ministry of Finance and Economic Affairs (MoF) is preparing an invitation to tender for electronic identification and trust services in relation to public services through web sites and web-portals, that fulfil requirements of EU regulation no. 910/2014 of the European Parliament on electronic identification and trust services (eIDAS). The Ministry calls for all interested parties that have technical and operational capability to offer the Icelandic government special services related to electronic certificates and authentication of electronic signatures and electronic identification for electronic government services. The first step is to request information on the service available (with a formal Request For Information – RFI).
The Ministry invites all interested parties to a presentation of the requested services. These presentations are scheduled to take place in April 2017. The tender is scheduled to be take place in May 2017.
The MoF has commissioned a report on usage of electronic certificates on both smartcards and on mobile phones / SIM cards for electronic public services, and estimates that the usage is approximately 200.000 validations per month from 115.000 users. As electronic public services are continuously growing the ministry foresees a steady increase in the usage of electronic certificates.
Requirements / The ministry's criteria:
The interested bodies must:
• Be able to issue electronic certificates to individuals under the Iceland root “Íslandsrót”, intended for authentication assurance of highest level and qualified signature. Íslandsrót is the self-signed root certificate at the top of the hierarchy of trust in the public key infrastructure in Iceland called PKI-IS. Íslandsrót is operated as an off-line trust anchor owned by MoF.
• Be able to process all existing electronic certificates issued under Íslandsrót and already in use. • Provide validation and authentication services 24/7.
• Have technical capability, necessary permits and relevant certification needed.
• Have sufficient operational strength.
• Have the capability to provide the necessary service for certificates on both SIM cards and smartcards implemented in Iceland.
• Have a solution that conforms to and complies with all European regulations regarding trust services and electronic certificates and complies with legal obligations of Iceland at all times.
In order for the Ministry to assess the capability, strength and experience of interested parties the information submitted in response to the RFI should include the following:
• Company profile and organization with emphasis on strength and capabilities.
• Reference to project experience in similar assignments undertaken with emphasis on last 5 years.
• A list of products / services that the company offers in this area and the manner in which the service is provided
• Information on the price model for usage licenses, validation services, production and issuance of certificates and other related services.
• CVs of key experts supporting the service, detailing qualifications and experience in similar assignments, particularly assignments undertaken in the previous five years.
Please submit your expression of interest and related material before end of day 28.04.2017 before1200 hour at utbod@rikiskaup.is