FCA Public Keys Infrastructure (PKI) as a Service

The existing FCA PKI service utilises multiple processes and manual intervention making the process slow and inefficient. A robust PKI service is crucial for maintaining trust, security, and privacy in digital communications by effectively managing cryptographic keys and certificates. <br/>The FCA is seeking to procure a Public Key Infrastructure as a service (PKIaaS) solution to provide central key and certificate management across the FCA estate as well as to support end user devices and TLS. There is a requirement to establish ownership for the PKI service to increase transparency and provide accountability. The introduction of a PKIaaS will enable the FCA to move away from a localised PKI. There will be a requirement to rollout a cloud-based PKIaaS with integrated lifecycle management with a dedicated offline root Certificate Authority (CA) with certificate issuing capability. The certificates for public-facing websites will be integrated with PKIaaS and processes for automated certificate management developed. The solution must support integration with Intune, AzureAD Single Sign On, and FCA PAM solution. Additional information: Open procedure will be utilised. The resulting contract from the upcoming tender will be for a 3year term valued at circa £730k per annum