NATO Request for Information: NATO Public Key Infrastructure – Third Party Trust

The NATO Communications and Information Agency (NCIA) is seeking information from industry partners to support the issuance of publicly trusted certificates for document signing, email signing, and Transport Layer Security (TLS) support. The agency is exploring options for a Qualified Trust Service Provider (QTSP) or equivalent partner to support qualified signatures, secure communications, and centralized trust governance. The RFI is for planning and informational purposes only and does not constitute a Request for Proposal (RFP), Request for Quotation (RFQ), or Invitation for Bid (IFB). • The NCIA is looking for a solution that can provide qualified electronic signatures (QES) that are legally recognized within the EU/EEA and other jurisdictions with aligned frameworks. • The solution should enable the issuance and management of certificate-based authentication credentials for internal use. • The NCIA is interested in understanding three main models for providing qualified trust services: NATO procuring services from an existing QTSP, vendor deploying a CA infrastructure on behalf of NATO, and NATO deploying and operating the CA with vendor-provided advisory and support. • Respondents are requested to provide information on their technical capabilities, pricing models, and experience with similar deployments.