DigiCert Brand Name Direct - EV/SSL and Organizational Certificates Services

The Indian Health Service (IHS), part of the Department of Health and Human Services, is seeking to procure DigiCert brand Direct - EV/SSL and Organizational Certificates Services to support secure clinical record and patient messaging exchange within the DirectTrust ecosystem. The requirement encompasses annual fees and renewal of X.509 Extended Validation (EV) Secure Sockets Layer and Organizational certificates that enable secure communication between IHS providers, external healthcare providers, and IHS patients across federal, tribal, and urban healthcare facilities. Vendors must be Information Technology Value Added Resellers with NAICS code 541519 and demonstrate capability as manufacturer authorized resellers for DigiCert services. This sources sought notice serves as market research to identify qualified vendors under the Buy Indian Act's preference guidelines, requiring submissions that include company details, Unique Entity ID, CAGE code, business size category, and capability statements limited to ten pages. Interested vendors must submit written responses by 10:00am EST on October 20, 2025, via email to julie.corbin@ihs.gov, referencing sources sought number 75H70425Q00044.

This procurement opportunity is designated as a set-aside for Indian Small Business Economic Enterprise (ISBEE) vendors, with businesses limited to 150 employees or less and required to maintain Indian Economic Enterprise (IEE) certification throughout the contract performance period. The contract structure includes a base year from January 1, 2026, to December 31, 2027, followed by two 12-month option years extending through December 31, 2029, providing up to four years of potential service delivery. The primary procurement items consist of 130 DigiCert Direct Organization Certificates (Medium), an Annual Certification Authority Maintenance Fee, a Basic EV SSL certificate, and Standard Support services. These certificates are critical for verifying website ownership, maintaining intermediate certificate authority compliance, and ensuring compliance with ONC Electronic Health Record legislative requirements. Delivery will be conducted electronically, with the contract designed to provide consistent certificate services and support across all performance periods.