Attachment 1 -- IHS Requirements Description - Direct EVSSL and Organizational Certificates - draft for SS on SAM.gov.pdf
PDF 258 KB Posted
- Solicitation number
- 75H70425Q00044
About this file
This Requirements Description outlines a procurement for DigiCert Direct EV/SSL and Organizational Certificates Services for the Indian Health Service (IHS). The requirement covers annual fees and renewal of X.509 Extended Validation (EV) Secure Sockets Layer and Organizational certificates used in the IHS Direct email system. The procurement supports federal, tribal, and urban healthcare facilities' compliance with ONC Electronic Health Record legislative requirements and enables secure clinical record exchange within the DirectTrust secure email ecosystem.
The contract includes a base year from 01/01/2026 to 12/31/2027 and two 12-month option years through 12/31/2029. The primary items being procured are 130 DigiCert Direct Organization Certificates (Medium), an Annual Certification Authority Maintenance Fee, a Basic EV SSL certificate, and Standard Support. The certificates are critical for verifying website ownership, maintaining intermediate certificate authority compliance, and enabling secure messaging between IHS providers, external providers, and IHS patients. Delivery will be electronic, with the contract structured to provide consistent service and certificates across the base and option years.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
REQUIREMENTS DESCRIPTION FOR
FOR
Direct - EV/SSL and Organizational Certificates Services
General: This procurement is for the payment of annual fees and renewal of DigiCert x.509 Extended Validation (EV) Secure Sockets Layer (SSL), and Organizational certificates used with the Indian Health Service (IHS) Direct email system.
Scope: The contractor shall provide DigiCert brand name Direct - EV/SSL and Organizational Certificates Services, as defined in this document.
Objectives: These certificates are required for the IHS to participate in the DirectTrust (Direct) secure email ecosystem. The certificates and the annual fees are required as technical components allowing the IHS end users to exchange clinical records and patient related messaging between IHS Providers to External Providers and IHS Providers to IHS Patients in a secure manner.
Background: IHS is required to use certified Electronic Health Record (EHR) technology per several HHS Office of the National Coordinator (ONC) Certified Electronic Health Record legislative requirements. This procurement supports the Federal, Tribal, and Urban health care facilities that use the IHS certified EHR and meet the requirements in the legislation found in §170.315 (b)(1) (https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-D/part-170#p- 170.315(b)(1)).
The IHS procured DigiCert certificates as the sole provider established with the implementation requirements of the ONC 2014 Edition EHR certification criteria to participate in the DirectTrust (Direct) secure email ecosystem. IHS is required to adhere to agreements with the certificate vendor (DigiCert), and the agreements and semiannual testing with DirectTrust to ensure we are compliant with their ridged security requirements.
The DigiCert certificate ensures the credibility of the IHS Direct domain for all system end users. DigiCert is an accredited member of the DirectTrust trust bundle that meets the requirements for Federal Bridge Certification Authority (FBCA) cross-signed certificates.
Period of Performance (PoP): The Period of Performance shall be 1 Base Year of 12 months and 2 12-month option years.
Requirement Description
Listed below are the items required to meet Government needs, also shown in Table 1
X.509 Extended Validation (EV) SSL – (Digicert)The Extended Validation (EV) SSL is used to prove the legal identity of the website ownership and is signed digitally with the certificate authority. Web browsers have an indication as the EV status as legitimate or a warning to the user to proceed. The EV SSL shows to IHS users that the website is bonfide and, in this case, the ownership is vetted by a federal lead.
Annual Certification Authority (CA) Maintenance Fee - The maintenance fee covers all the ongoing costs of maintaining the Intermediate Certificate Authority (ICA) (compliance, audits, security, facilities, operations, back office, etc).
Organizational SSL Certificates -These are used with the Indian Health Service (IHS) Direct email system. These are required for the IHS to participate in the DirectTrust (Direct) secure email ecosystem. The certificates and the annual fees are required as technical components allowing the IHS end users to exchange clinical records and patient related messaging between IHS Providers to External Providers and IHS Providers to IHS Patients in a secure manner.
Table 1
ITEM DESCRIPTION QTY
Base Year (01/01/2026 - 12/31/2027)
DigiCert - DIRECT ORGANIZATION CERT.
MEDIUM
0002 Annual CA Maintenance Fee 1
0003 Basic EV SSL 1
0004 Standard Support 1
Option Year 1 (01/01/2027 - 12/31/2028)
DigiCert - DIRECT ORGANIZATION CERT.
MEDIUM
2002 Annual CA Maintenance Fee 1
2003 Basic EV SSL 1
2004 Standard Support 1
Option Year 2 (01/01/2028 - 12/31/2029)
DigiCert - DIRECT ORGANIZATION CERT.
MEDIUM
3002 Annual CA Maintenance Fee 1
3003 Basic EV SSL 1
3004 Standard Support 1
Delivery: Electronic
Security: N/A
File details come from the government source that posted it. Updated .