Smart Card/Token Requirement, Public Key Infrastructure

***Amendment 003*** To address the second set of Q&As.

***Amendment 002*** To extend the closing date and address the first set of Q&As.

***Amendment 001*** To extend the closing date.

______________________________________________________________________

1. Overview of Project: The Directorate of Information Management Engineering and Integration (DIMEI) have been tasked to design, develop, and deploy a Public Key Infrastructure (PKI) within two separate security domains at the Department of National Defence (DND). PKI enablement will be implemented both within applications through digital signature(s) as well as with infrastructure through authentication(s). Email, file encryption and digital signature will be rolled out to users. DND’s current solution is based on an Entrust PKI. DND intends to competitively establish a Contract(s), Standing Offer(s) (SO(s)), and/or Supply Arrangement(s) (SA(s)) providing the required PKI hard tokens as and when required. The primary focus will be smart cards, however alternate form factors, such as but not restricted to Universal Serial Bus (USB) tokens and SD cards (Secure Digital Memory Cards) will be considered.

   Technical compliance to strong security standards is important to DND. Therefore, a robust and high assurance solution, which establishes a supply of tokens that is not wholly dependent upon a single technology or single Original Equipment Manufacturer (OEM), is required.