Hardware and Software for NemLog-in CA component

Delaftaler (3):

• •Contract for CA and OCSP Software: The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Certification Authority (CA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The Contract covers the delivery of Standard Software, including Licences, Documentation and support necessary to operate CA and Validation Authority (VA) functionality as part of the Contracting Authority's trust services. The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, registration authority components, signing services, directory services and monitoring infrastructure, and must support the migration of the existing EJBCA-based CA environment while preserving certificate, revocation and audit-log integrity. The Supplier's principal obligations comprise: (a) the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test; (b) Ongoing Services, including support and maintenance of the Standard Software and security patching; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.
• •Contract for Utimaco HSM's for CA operation: The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Hardware Security Modules (HSMs) for CA operation to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The lot covers the delivery of HSM, including the required client software, HSM simulator, smartcards, Documentation and support necessary to operate root CA and legacy issuing CA functionality as part of the Contracting Authority's trust services. The HSMs must integrate with the Contracting Authority's existing infrastructure, including KeyFactor EJBCA, monitoring infrastructure and associated operational processes, and must support the secure migration of the existing root CA and legacy issuing CA signing keys at cryptographic-module level while preserving the certification status and verifiability of the key material. The Supplier's principal obligations comprise: (a) the Delivery of Hardware, including associated client software, sized and configured for operation across two data centres in an active/active configuration, together with deployment in the Contracting Authority's production, staging, and test environments; (b) Ongoing Services, including support and maintenance of the Hardware, security patching, and technology refresh of Hardware during the term of the Contract to maintain valid certifications; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks) and Options and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.
• •Contract for TSA Software: The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Timestamping Authority (TSA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The lot covers the delivery of Standard Software, including Licences, Documentation and support and maintenance services necessary to operate TSA functionality as part of the Contracting Authority's trust services. The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, signing services and monitoring infrastructure, and must support the migration of the existing TSA service while preserving the qualified status and verifiability of historical timestamping records. The Supplier's principal obligations comprise: (a) the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test; (b) Ongoing Services, including support and maintenance of the Standard Software and security patching; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.

Yderligere oplysninger: Participation in the procurement procedure can only take place electronically via the electronic procurement system used by the Contracting Authority. In order to gain access to the procurement documents, the tenderer must be registered or register as a user. If the tender contains several versions of the same document, the latest uploaded version shall prevail. All communication in connection with the procurement procedure, including questions and answers, shall take place via the electronic procurement system. For information regarding questions and answers, reference is made to the Tender Conditions and Appendix B.

Interested parties are requested to keep themselves informed via the electronic procurement system. If the tenderer experiences problems with the system, support can be contacted via ETHICS Customer Service Denmark or by telephone (+45) 6313 3700. The tender must be submitted in English. The tenderer shall submit an ESPD together with its tender as preliminary evidence of the circumstances referred to in Section 148(1)(1)-(3) of the Danish Public Procurement Act. The tenderer is not required to sign its ESPD document. In the event of a group of economic operators (e.g. a consortium), a separate ESPD shall be submitted for each participating economic operator.

If the tenderer is a group of economic operators, each participant’s ESPD document shall be signed by the respective participant. The lead tenderer submitting the application is not required to sign its ESPD document. If the tenderer relies on the capacities of other entities, an ESPD shall be submitted for each of the entities on whose capacities the tenderer relies, and the ESPD document shall be signed by the supporting entity. The tenderer may rely on the financial capacity of other entities in order to fulfil the suitability requirements, cf. sections III.1.2) and III.1.3). The entity or entities making their financial capacity available shall sign a commitment undertaking.

If the tenderer relies on the economic and financial capacity of other entities in relation to fulfilment of the suitability requirements set out below, the Contracting Authority requires that the tenderer and the relevant entities shall be jointly and severally liable for the performance of the contract. The tenderer will be excluded from participation in the procurement procedure if the tenderer is subject to the mandatory exclusion grounds set out in Sections 134a, 135 and 136 of the Danish Public Procurement Act, unless the tenderer has provided sufficient documentation demonstrating that it is reliable pursuant to Section 138 of the Danish Public Procurement Act.

Prior to the contract award decision, the tenderer whom the Contracting Authority intends to award the contract to shall provide documentation of the information submitted in the ESPD in accordance with Sections 151-152 of the Danish Public Procurement Act, cf. Section 153. As an alternative to the documentation referred to in Sections 153-155, 157 and 158 of the Danish Public Procurement Act, the tenderer may submit to the Contracting Authority a certificate of registration on an official list of approved economic operators, cf. Section 156, issued by the competent authority.

The Contracting Authority can only accept a certificate of registration on an official list from tenderers established in the country maintaining the official list. The Contracting Authority may apply the procedure set out in Section 159(5) of the Danish Public Procurement Act if applications or tenders do not comply with the formal requirements of the procurement documents. No participation fee will be paid. It is noted that the estimated value constitutes an estimate of the expected contract value for all lots for the entire duration of the contracts, including the price of any options. The estimate is based on historical consumption and an expected economic scenario.

Attention is drawn to the fact that the procurement procedure is subject to Article 5k of Council Regulation (EU) No 833/2014, as subsequently amended. The provision contains a prohibition against awarding contracts to Russian companies and Russian-controlled companies, etc. (see Article 5k(1) for the precise definition of the entities covered by the prohibition).

The Contracting Authority reserves the right, at any time during the procurement procedure, to request documentation demonstrating that economic operators are not covered by the prohibition, for example by requesting a declaration to this effect and/or documentation regarding the place of establishment and ownership structure of the economic operators and any subcontractors. The document is available via the electronic procurement system.

Omfatter (CPV-koder): Databehandlingsmaskiner (hardware), Programpakke til kommunikations- og multimedieformål, Værktøjsprogrampakke, Informationssystemer og servere.

Tildeling: Price 40 %, Quality 60 %.

Reference is made to the Tender specifications Appendix A.

Varighed: 120 måneder / 12 måneder.

Optioner: The lot includes an Option to extend the deployment to a third data centre. Reference is made to Appendix 4 and 7 for further details.

Krav til tilbudsgiver:

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications. The form is enclosed as an attachment to the tender specifications.

If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity. Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.

Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available. For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group.

Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well. Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 20 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.

For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information: The tenderer's equity in the latest financial year available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications. The form is enclosed as an attachment to the tender specifications.

If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of the suitability requirements, the tenderer and the entities concerned will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity. Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.

Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: The operator's balance sheet, or extracts thereof, from the latest annual report/financial statements available, where publication of the balance sheet is required under the law of the country in which the operator is established, or other documentation demonstrating the operator's equity. For groups of operators (e.g. a consortium), the relevant information from the latest annual report/financial statements available must be submitted for each participating operator in the group.

Where an operator relies on the economic and financial capacity of other entities (e.g. a parent company, a sister company or a subcontractor), the corresponding information for such other entities must also be submitted. Minimum requirement: As a minimum requirement, the tenderer must have positive equity in the latest annual report/financial statements available. If the tenderer relies on the capacities of other entities, the equity is to be calculated as the combined equity of the tenderer and such other entities based on the latest annual report/financial statements available.

For groups of operators (e.g. a consortium), the equity is calculated as the combined equity of the participating operators based on the latest annual report/financial statements available. The information is to be stated in Section IV.B of the ESPD.

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications. The form is enclosed as an attachment to the tender specifications.

If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity. Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.

Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available. For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group.

Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well. Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 15 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.

For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications. The form is enclosed as an attachment to the tender specifications.

If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity. Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate.

Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available. For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group.

Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well. Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 4,5 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available.

For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.