← Back to opportunities

Automated Certificate Management Solution

The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

Buyer Contact Info

Buyer Name: The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)

Buyer Address: 1 South Gyle Crescent, Edinburgh, UKM, EH12 9EB, United Kingdom

Contact Email: ruaridh.armitage@nhs.scot

Contact Telephone: +44 1312756000

Status
complete
Procedure
limited
Value
86129.0 GBP
Published
12 Dec 2025, 14:55
Deadline
n/a
Contract Start
n/a
Contract End
n/a
Category
services
CPV
72000000 - IT services: consulting, software development, Internet and support
Region
n/a
Awarded To
Computacenter
Official Source
Open Find a Tender

Description

To help the DaS Directorate manage the number of certificates owned/used.

Linked Documents

No linked documents found for this notice.

Opportunity Context

Lots

Lot Description: NSS, along with many other businesses, utilise SSL/TLS certificates in order that users may establish and confirm the identity of our websites over the Internet or private networks; ultimately securing network communications. The governing body for certificate-based communication is the Certificate Authority/Browser Forum (CA/B Forum). It brings together representatives from certificate-issuing authorities, major web browser providers, and software developers. The forum includes key industry leaders such as Google and Apple. In April this year, The CA/B Forum officially voted to amend the TLS Baseline Requirements and initiate a process of certificate lifetime shortening, as per the following: - As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days. - As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days. - As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days. As a result of which, given the number of certificates we own/use (more than 250) it will no longer be practical to continue to renew these manually, as per our current process. To help manage this situation, an SBAR has been approved by DaS Directorate to progress with the purchase of a cloud hosted automated certificate management solution

Lot 1 Status: cancelled

Lot 1 Has Options: No

Raw Notice JSON

Expand raw payload
{
  "awards": [
    {
      "id": "082561-2025-1",
      "relatedLots": [
        "1"
      ],
      "status": "active",
      "suppliers": [
        {
          "id": "GB-FTS-54766",
          "name": "Computacenter"
        }
      ]
    }
  ],
  "bids": {
    "statistics": [
      {
        "id": "1",
        "measure": "bids",
        "relatedLot": "1",
        "value": 1
      },
      {
        "id": "2",
        "measure": "smeBids",
        "relatedLot": "1",
        "value": 0
      },
      {
        "id": "3",
        "measure": "foreignBidsFromEU",
        "relatedLot": "1",
        "value": 0
      },
      {
        "id": "4",
        "measure": "foreignBidsFromNonEU",
        "relatedLot": "1",
        "value": 1
      },
      {
        "id": "5",
        "measure": "electronicBids",
        "relatedLot": "1",
        "value": 1
      }
    ]
  },
  "buyer": {
    "id": "GB-FTS-115937",
    "name": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)"
  },
  "contracts": [
    {
      "awardID": "082561-2025-1",
      "dateSigned": "2025-12-09T00:00:00Z",
      "id": "082561-2025-1",
      "status": "active",
      "value": {
        "amount": 86129,
        "currency": "GBP"
      }
    }
  ],
  "date": "2025-12-12T14:55:49Z",
  "description": "(SC Ref:818444)",
  "id": "082561-2025",
  "initiationType": "tender",
  "language": "en",
  "links": [
    {
      "href": "https://api.publiccontractsscotland.gov.uk/v1/Notice?id=ocds-r6ebe6-0000818444",
      "rel": "canonical"
    }
  ],
  "ocid": "ocds-h6vhtk-05f504",
  "parties": [
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Edinburgh",
        "postalCode": "EH12 9EB",
        "region": "UKM",
        "streetAddress": "1 South Gyle Crescent"
      },
      "contactPoint": {
        "email": "ruaridh.armitage@nhs.scot",
        "telephone": "+44 1312756000"
      },
      "details": {
        "buyerProfile": "https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA11883",
        "classifications": [
          {
            "description": "Body governed by public law",
            "id": "BODY_PUBLIC",
            "scheme": "TED_CA_TYPE"
          },
          {
            "description": "Health",
            "id": "07",
            "scheme": "COFOG"
          }
        ],
        "url": "http://www.nss.nhs.scot/browse/procurement-and-logistics"
      },
      "id": "GB-FTS-115937",
      "identifier": {
        "legalName": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)"
      },
      "name": "The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)",
      "roles": [
        "buyer",
        "centralPurchasingBody"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Edinburgh",
        "postalCode": "EH12 9DQ",
        "region": "UK",
        "streetAddress": "Haston House, 2 Redheughs Rigg,, South Gyle"
      },
      "contactPoint": {
        "telephone": "+44 1313172373"
      },
      "details": {
        "scale": "large"
      },
      "id": "GB-FTS-54766",
      "identifier": {
        "legalName": "Computacenter"
      },
      "name": "Computacenter",
      "roles": [
        "supplier"
      ]
    },
    {
      "address": {
        "countryName": "United Kingdom",
        "locality": "Edinburgh",
        "postalCode": "EH1 1LB",
        "streetAddress": "27 Chambers Street"
      },
      "id": "GB-FTS-404",
      "identifier": {
        "legalName": "Edinburgh Sheriff Court"
      },
      "name": "Edinburgh Sheriff Court",
      "roles": [
        "reviewBody"
      ]
    }
  ],
  "tag": [
    "award",
    "contract"
  ],
  "tender": {
    "classification": {
      "description": "IT services: consulting, software development, Internet and support",
      "id": "72000000",
      "scheme": "CPV"
    },
    "coveredBy": [
      "GPA"
    ],
    "description": "To help the DaS Directorate manage the number of certificates owned/used.",
    "id": "ocds-h6vhtk-05f504",
    "items": [
      {
        "deliveryAddresses": [
          {
            "region": "UKM"
          }
        ],
        "id": "1",
        "relatedLot": "1"
      }
    ],
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "lots": [
      {
        "awardCriteria": {
          "criteria": [
            {
              "type": "price"
            }
          ]
        },
        "description": "NSS, along with many other businesses, utilise SSL/TLS certificates in order that users may establish and confirm the identity of our websites over the Internet or private networks; ultimately securing network communications.\nThe governing body for certificate-based communication is the Certificate Authority/Browser Forum (CA/B Forum). It brings together representatives from certificate-issuing authorities, major web browser providers, and software developers. The forum includes key industry leaders such as Google and Apple.\nIn April this year, The CA/B Forum officially voted to amend the TLS Baseline Requirements and initiate a process of certificate lifetime shortening, as per the following:\n- As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days.\n- As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days.\n- As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days.\nAs a result of which, given the number of certificates we own/use (more than 250) it will no longer be practical to continue to renew these manually, as per our current process.\nTo help manage this situation, an SBAR has been approved by DaS Directorate to progress with the purchase of a cloud hosted automated certificate management solution",
        "hasOptions": false,
        "id": "1",
        "status": "cancelled"
      }
    ],
    "mainProcurementCategory": "services",
    "procurementMethod": "limited",
    "procurementMethodDetails": "Award procedure without prior publication of a call for competition",
    "procurementMethodRationale": "Call off contract from the Scottish Government Software Value Added Reseller Services Framework.",
    "procurementMethodRationaleClassifications": [
      {
        "description": "The procurement falls outside the scope of application of the directive",
        "id": "D_OUTSIDE_SCOPE",
        "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL"
      }
    ],
    "reviewDetails": "Economic operators should approach the contracting authority in the first instance. However, the only formal remedy is to apply to the courts:\nAn economic operator that suffers, or is at risk of suffering, loss or damage attributable to a breach of duty under the Public Contracts (Scotland) Regulations 2015 or the Procurement Reform (Scotland) Act 2014, may bring proceedings in the Sheriff Court or the Court of Session.",
    "status": "complete",
    "title": "Automated Certificate Management Solution"
  }
}