HID Credential Management System

The Federal Energy Regulatory Commission (FERC) is soliciting proposals to renew and maintain its HID Global ActivID Credential Management System (CMS) licenses and services for logical access control to FERC's IT environment. This procurement includes 350 existing ActivID licenses, software maintenance and support services, and potential system upgrades to meet evolving cybersecurity standards, with optional tasks such as server migration and transition from FIPS 140-2 to FIPS 140-3 validated modules. Key requirements mandate that the contractor be an authorized HID reseller, ensure compatibility with Microsoft Active Directory and Windows 11 Enterprise, maintain integration with FERC's Personnel Access Control System, and achieve compliance with federal security standards including FedRAMP, NIST 800-53, and FIPS 140-2 Level 3. The solicitation will be evaluated using the Lowest Price Technically Acceptable (LPTA) method, with all offerors required to maintain current SAM registration. The original deadline for questions was January 19, 2026, and the original proposal submission deadline of January 21, 2026 at 1:00 PM EST was extended to January 22, 2026 at 1:00 PM EST via Amendment 0001; offerors must acknowledge receipt of this amendment prior to submission.

This procurement carries no set-aside designation and appears to be a sole-source or limited-competition award based on FERC's existing investment in ActivID infrastructure and staff training. HID Global ActivIdentity represents the incumbent solution, with the brand name justification document indicating that FERC engineers are already trained on this specific system and current contractors possess the necessary expertise. The contract is structured as a Firm Fixed Price acquisition with specific line items including 300 units of annual HID ActivID CMS support and maintenance, 5 ActivClient per-user licenses, optional CMS setup, optional usage tracking software, and professional services for migration (25 units) and usage tracking installation (25 units). The performance period runs from January 27, 2026 through January 26, 2027 for the base year, with two additional optional years extending through January 26, 2030. All work will be performed at FERC Headquarters in Washington, DC 20426.