Enterprise Certificate Lifecycle Management (CLM)

⁠⁠⁠TfNSW seeks a scalable enterprise Certificate Lifecycle Management solution to centralise inventory, automate issuance and renewal, reduce outage risk, and support shortening certificate lifespans.

Project goals

The goal of this project is to procure and implement an enterprise grade Certificate Lifecycle Management (CLM) solution that reduces cyber security risk, service disruption, and operational overhead across Transport for NSW.

The objectives are to:

1. Establish a centralised, authoritative inventory of all digital certificates across TfNSW environments.

2. Enable end to end automation of certificate request, issuance, deployment, renewal, and revocation processes.

3. Reduce outage risk and manual effort, particularly in response to shortening certificate validity periods mandated by industry standards.

4. Improve visibility, monitoring, and compliance with Transport’s Cryptography and Key Management Standard.

5. Support secure integration with existing Transport platforms, applications, and PKI services.

6. Provide robust reporting and dashboards for operational teams, risk management, and executive oversight.

7. Deliver a scalable, flexible solution supported by implementation, maintenance, and enhancement services to adapt to TfNSW’s evolving technology landscape.

These objectives collectively support improved cyber resilience, operational reliability, and long term cost efficiency.

Scope

TfNSW is seeking suppliers to provide a fit for purpose, enterprise grade Certificate Lifecycle Management (CLM) solution and associated services. The scope includes the supply, implementation, and ongoing support of a centralised platform that enables full end to end management of digital certificates across Transport environments.

The solution must provide:

• Centralised discovery, visibility, and inventory of all digital certificates
• Automated certificate lifecycle workflows, including request, issuance, deployment, renewal, monitoring, and revocation
•  Support for industry mandated reductions in certificate validity periods
•  Secure integration with existing TfNSW systems, applications, and PKI services
•  Monitoring and reporting of compliance with Transport’s Cryptography and Key Management Standard
•  Comprehensive reporting and dashboards for operational, risk, and executive audiences

Suppliers will also be required to deliver:

•  An implementation approach and delivery plan
•  Installation, configuration, and deployment services
•  Ongoing technical support and incident resolution
•  Maintenance services including updates, health checks, and performance tuning
•  Enhancement services to support continuous improvement and evolving business needs

The solution must be scalable, resilient, and adaptable to TfNSW’s changing technology landscape.

Primary contact:

Prachi Pandey

Prachi.Pandey@transport.nsw.gov.au