HydrantID TLS Software Renewal

The National Institute of Allergy and Infectious Diseases (NIAID), a component of the National Institutes of Health under the Department of Health and Human Services, is issuing a Notice of Intent to renew an Enterprise Trusted SSL/TLS certificate subscription through sole-source procurement. The procurement seeks to maintain critical SSL/TLS certificate services that are essential for securing NIAID's enterprise applications, web services, and cloud-based infrastructure that operate continuously throughout the year. Key requirements include support for a single legal organizational entity, up to 10 system administrators, 15 internet domains, and 500 active SSL certificates including 5 Extended Validation Code Signing Certificates with various certificate types such as Organizational Validated and Multi-Subject Alternative Naming Certificates. The government has determined that changing providers would cause massive disruptions to agency systems and potentially jeopardize ongoing experiments, justifying the sole-source approach under 41 U.S.C. 1901(a)(1) and FAR 13.106-1. All responsible sources interested in providing this product or service must submit a capability statement along with a letter of authorization to resell by January 16, 2026, at 10:00 am Eastern Time via email to Linda Smith at linda.smith2@nih.gov, though the government reserves the right to make a final determination not to compete the requirement based on responses received.

This procurement is not designated as a set-aside contract and reflects the incumbent contractor HID Global dba HydrantID, which currently serves as HHS/NIH's standard security technology provider for web and cloud-based services. The contract period of performance spans from December 15, 2025, through December 14, 2026, with an estimated award date of January 19, 2025, and includes a reinstatement fee to cover the gap between the original period start date and the actual award date. The specific budget range or award value is not disclosed in the pre-solicitation notice; however, the scope encompasses a comprehensive 12-month Enterprise Trusted SSL subscription supporting the agency's 24/7 operational requirements for digital signatures and data privacy. Interested parties should note that any quote submission must account for the period-of-performance lapse by including appropriate reinstatement fees while maintaining the original contract end date of December 14, 2026.