--- title: "Certificate Lifecycle Management Programme Core Services" ocid: "ocds-h6vhtk-059daa" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-059daa" markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-059daa.md" json_url: "https://d3tenders.com/contract/ocds-h6vhtk-059daa.json" source: "Find A Tender Service" current_stage: "Planning" buyer: "NETWORK RAIL INFRASTRUCTURE LIMITED" published: "2025-11-04" --- # Certificate Lifecycle Management Programme Core Services Buyer: NETWORK RAIL INFRASTRUCTURE LIMITED Current stage: Planning OCID: ocds-h6vhtk-059daa [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-059daa) [Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-059daa.json) ## Summary Network Rail Infrastructure Limited is conducting a procurement process under the utilities regime for its Certificate Lifecycle Management Programme Core Services. This initiative, valued at approximately £800,000, focuses on the implementation of a solution to manage SSL/TLS certificates in response to emerging industry standards. The process is currently in the planning phase, with market engagement notices issued to attract potential suppliers. Interested suppliers are invited to participate in the preliminary market engagement, with the opportunity to submit structured presentations as part of their response. The latest deadline for presentation submissions has been extended to 12th November 2025, and the procurement process is expected to commence on 30th November 2025, with the contract running until 30th November 2028. The service location is primarily focused on London, United Kingdom, under the information technology services category. This tender presents significant opportunities for businesses specialising in IT services, particularly those offering solutions related to software development, compliance, and security automation. The requirements for centralised and automated management of security certificates across multiple environments indicate a demand for innovative technology capable of handling large-scale infrastructure operations. Businesses with a strong track record in providing scalable IT solutions, especially those aligning with new security standards, will find this tender particularly appealing. Small to medium enterprises (SMEs) and voluntary, community, and social enterprises (VCSE) are encouraged to participate, with the procurement process designed to support their involvement. This engagement will allow suppliers to position themselves as key technology partners for Network Rail, offering opportunities for growth and the potential to influence future digital strategies within the rail infrastructure sector. ## Notice Network Rail is seeking to engage the market regarding the future procurement of a Certificate Lifecycle Management (CLM) solution. This project is driven by significant industry changes, including the CA/Browser Forum's decision to reduce the maximum lifespan of public SSL/TLS certificates over the coming years. By 2029, certificates will require renewal as frequently as every 47 days, and domain validation reuse will be limited to just 10 days. These changes are intended to enhance security but will introduce substantial operational overhead, making manual certificate management impractical and automation essential. Network Rail operates across a complex landscape of on-premises, cloud, and supplier-managed environments. A key challenge is the fragmented ownership and lack of central visibility over certificates, particularly those issued and managed by third-party suppliers. This fragmentation increases the risk of outages due to expired or misconfigured certificates and limits Network Rail's ability to monitor, renew, or enforce compliance directly. The CLM project aims to address these challenges by implementing a solution that enables the centralised, automated management of certificates throughout their lifecycle, regardless of where they are issued or managed. The solution must provide comprehensive visibility across all environments, support robust automation for renewal and validation, and enable clear supplier accountability through contractual mechanisms. This includes the ability to track certificates managed by third parties, enforce renewal responsibilities, and ensure that incidents caused by supplier failures can be managed contractually. Network Rail is inviting suppliers to demonstrate how their solutions can meet these requirements, including the ability to: Centrally track and manage certificates across all environments and suppliers. Automate certificate renewal, validation, and compliance processes. Provide visibility and control over third-party issued certificates. Support supplier accountability and contractual enforcement. Align with upcoming industry standards and security requirements. Deliver proven solutions at scale, with references from similar large infrastructure organisations. We welcome responses from suppliers offering innovative, scalable, and future-proof approaches, including those with experience in complex, multi-stakeholder environments. Suppliers are encouraged to share relevant case studies, lessons learned, and any alternative models that could help Network Rail achieve its objectives. This market engagement will inform Network Rail's approach to the procurement of a CLM solution that ensures security, operational resilience, and compliance in a rapidly evolving digital landscape. ### Planning Information Network Rail is inviting suppliers to participate in this preliminary market engagement for the Certificate Lifecycle Management System. The engagement process is as follows: Accessing the Documents: Suppliers should access the draft requirements and supporting documents via the Network Rail Bravo platform. Visit https://networkrail.bravosolution.co.uk/web/login.html, select "View Current Opportunities," and choose "Certificate Lifecycle Management Programme Core Services." The documents will be available in the attachments section; no login is required. Reviewing Requirements: Suppliers are requested to carefully review the draft requirements document and all supporting materials provided. Supplier Response - Structured Presentation: After reviewing the requirements, suppliers must prepare a structured PowerPoint presentation that addresses all elements outlined under the "Supplier Presentation Requirements for PME" section of the briefing pack. Presentations should comprehensively cover each specified area, demonstrating how your solution meets Network Rail's needs and responding to all requested points. Submission Instructions: Completed presentations must be submitted by email to Humza Tayyab at humza.tayyab@networkrail.co.uk no later than 17:00 on 12th November 2025. Please ensure your submission clearly references your organisation name and the CLM Programme. Submissions received after the deadline may not be considered. Clarifications: Any questions or requests for clarification regarding this notice should be directed to humza.tayyab@networkrail.co.uk. Review and Further Engagement: Upon receiving your completed presentation, Network Rail will review all responses and may contact suppliers for further information or discussion if necessary. ## Key Details | Field | Value | | --- | --- | | Publication source | Find A Tender Service | | Latest notice | https://www.find-tender.service.gov.uk/Notice/070933-2025 | | Notice type | UK2 - Preliminary Market Engagement Notice | | Procurement type | Standard | | Procurement category | Services | | Procurement method | Not Specified | | Procurement method details | Not specified | | Tender suitability | SME, VCSE | | Awardee scale | Not specified | | All stages | Planning | ## Dates | Field | Value | | --- | --- | | Publication date | 4 Nov 2025 | | Submission deadline | Not specified | | Future notice date | 12 Nov 2025 | | Award date | Not specified | | Contract period | 30 Nov 2025 - 30 Nov 2028 | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £800,000 | | Lots value | Not specified | | Awards value | Not specified | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Planning | | Lots status | Planning | | Awards status | Not specified | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | NETWORK RAIL INFRASTRUCTURE LIMITED | | Locality | LONDON | | Post town | South East London | | Postcode | SE1 8SW | | Country | England | | ITL 1 | TLI London | | ITL 2 | TLI4 Inner London - East | | ITL 3 | TLI45 Lambeth | | Local authority | Lambeth | | Electoral ward | Waterloo & South Bank | | Westminster constituency | Vauxhall and Camberwell Green | | Delivery location | Not specified | ## CPV Codes ### Divisions - 72 - IT services: consulting, software development, Internet and support ### Codes - 72000000 - IT services: consulting, software development, Internet and support - 72212170 - Compliance software development services - 72212200 - Networking, Internet and intranet software development services - 72212218 - License management software development services - 72212732 - Data security software development services - 72222300 - Information technology services - 72260000 - Software-related services - 72261000 - Software support services - 72267000 - Software maintenance and repair services - 72590000 - Computer-related professional services - 72610000 - Computer support services ## Release History - 4 Nov 2025 at 15:40 - PlanningUpdate - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/070933-2025 - 23 Oct 2025 at 21:42 - PlanningUpdate - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/068007-2025 - 23 Oct 2025 at 21:27 - PlanningUpdate - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/068006-2025 - 23 Oct 2025 at 21:26 - PlanningUpdate - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/068005-2025 - 18 Sep 2025 at 17:57 - Planning - UK2 - Preliminary Market Engagement Notice - https://www.find-tender.service.gov.uk/Notice/057910-2025 ## Documents - https://www.find-tender.service.gov.uk/Notice/070933-2025 4th November 2025 - Preliminary market engagement notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/068007-2025 23rd October 2025 - Preliminary market engagement notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/068006-2025 23rd October 2025 - Preliminary market engagement notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/068005-2025 23rd October 2025 - Preliminary market engagement notice on Find a Tender - https://www.find-tender.service.gov.uk/Notice/057910-2025 18th September 2025 - Preliminary market engagement notice on Find a Tender ## Notice URLs - https://networkrail.bravosolution.co.uk/web/login.html - https://www.legislation.gov.uk/ukpga/2023/54/contents - https://www.networkrail.co.uk/ ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-059daa. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-059daa.json.