EJBCA HARDWARE APPLICATION

Federal Prison Industries (FPI) must maintain the operation and maintenance of its newly implemented Public Key Infrastructure (PKI) which was upgraded from late 2024 through early 2025. This enterprise-level core service includes vendor-specific hardware (e.g., EJBCA/Hardware Secure Modules) and software that provide cryptography, certificate authority, endpoint certificate, and digital security across the entire FPI computing environment. It is through annual subscription-based licenses that keep the hardware and software operational. Additionally, maintenance, troubleshooting, hardware replacement, and software upgrades are provided through annual Premium Support. The proposed contracting agency is KeyFactor, which specializes in encryption and PKI. They are the manufacturers and developers of the appliances and software. FPI is needing to maintain the certificate authority that provides cryptography and security across the FPI environment. The certificate authority is a highly complex area of IT that is a unique skillset. Acquiring a consultant with the knowledge and ability to upgrade the certificate authority in a government environment and ensure that it does not negatively impact the many applications and processes that rely on a functioning certificate authority is a critical need.