Federal Public Key Infrastructure Management Authority (FPKIMA): Request for Information and Source Sought

On behalf of the General Services Administration - FAS, GSA is conducting market research to understand capabilities related to providing the below requirement:

NOTE: This is a downloadable copy of the sources sought (SS) and request for informtation (RFI) when it was posted. Please download both documents (1. Questions & 2. RFI / SS PDF Document) and respond by: 1. submitting the completed RFI questions & 2. responding to the RFI/SS PDF Document attached. Please submit responses via email to deborah.aubert-bell@gsa.gov.

This Request for Information (RFI) does NOT constitute a Request for Proposal and is not to be construed as a commitment, implied or otherwise, by the Government that a procurement action will be issued. No telephone inquiries will be accepted and requests for solicitation packages will not be honored, as no solicitation is intended at this time. Response to this notice is not a request to be added to a bidders list or to receive a copy of a solicitation.

The Federal Public Key Infrastructure (FPKI) was created out of the E-Government Act of 2002 which directed the General Services Administration (GSA) to establish and operate the Federal Bridge Certification Authority (FBCA). From this initial program, the Federal PKI has grown into a diverse PKI ecosystem of hundreds of certificate authorities (CAs) for federal and state government agencies as well as foreign and US commercial participating PKIs.

Purpose The centralized operation and support of the FPKI provides for the tracking, participation, dissemination, and implementation of PKI for the federal government to be rapidly and cost- effectively compliant with changes and/or new requirements or orders from several different federal government and other policy organizations.

These include the Office of Management and Budget (OMB), the FPKI Policy Authority, National Institute of Standards and Technology (NIST), Federal CIO Council, and other similar organizations. Emerging requirements are driven from numerous factors including National Policy, stakeholder needs, technology advancements, or current or future security risks and issues.