PROCUREMENT OF PUBLIC KEY INFRASTRURE (PKI) SOLUTION WITH MAINTENANCE AND SUPPORT FOR A PERIOD OF FIVE YEARSClosed

Overview

Procurement of an on-premises Public Key Infrastructure (PKI) solution with maintenance and five years of support. SSA seeks a vendor to supply PKI hardware, software, training and a five-year maintenance package, including tamper‑proof HSMs, CA operations and related security features. Bidders should have substantial PKI experience, including ISO 21188 and WebTrust for CAs, and be capable of security clearance.

Requirements

• On-premise, three-tier PKI with three issuing CAs; CAB Forum compliant; capable of joining CA browser stores; minimum 1000 end-user certificates; expandable licensing and license mobility across CAs.
• Five years of standard maintenance and local support (renewable annually).
• Training for administration and cryptography (minimum 20 users).
• Turnkey hardware if required, plus architecture, installation and configuration.
• Tamper-proof HSMs certified to FIPS 140-3 Level 3 (Root/Intermediate/Issuing CA).
• Storage for databases, backups, DR; movable DR rack; required network components and security appliances.
• PKI features: OCSP, CRL, RA, X.509 templates, key ceremonies, automated certificate management; PQC ready.
• Demonstrated PKI experience (minimum 3 years) with at least 3 PKI projects and qualified staff.
• Regulatory/compliance: ISO 21188, WebTrust for CAs, key ceremony practices; security vetting of staff; security clearances as needed.
• Administrative prerequisites: SARS tax clearance or CSD registration; BBBEE compliance; relevant SBD forms and schedules.

How to Apply

• Submission deadline: 13 July 2026, 11:00. Accepts both e-tender and hand delivery; no email submissions. Deposit in SSA bid box at SSA Head Office, Musanda Complex, 1 Joe Nhlanhla Street, Pretoria 0181. (SSA/06/2026/27)
• Contact for enquiries: Neo Sekgobela, neowilliams@ssa.gov.za, 012-427-2686. (SSA metadata)
• Documents to submit: official bid forms and schedules (Part 3 – Schedules A–K), Pricing Schedule (SBD 3.2), Bidders Declaration (SBD 4), Preference Points (SBD 6.1), Tax Clearance (SBD 2), CSD details, BBBEE certificates, and security-clarity documentation as required in Part 3.
• Pre-qualifications: Tax compliance with SARS (PIN or CSD), CSD registration for all consortium members; BBBEE where applicable.
• Compulsory briefing: none (Part 1).
• Bid documents: GCC General Conditions of Contract (GCC.pdf) and related schedules are included with the bid package. (GCC.pdf)