Hardware and Software for NemLog-in CA component

Digitaliseringsstyrelsen

The Contracting Authority, the Danish Agency for Digital Government (Digitaliseringsstyrelsen), operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service, the Contracting Authority is undertaking procurement of three separate lots/contracts for the software and hardware components required. The procurement comprises three individual lots/contracts: Lot 1 for Contract for CA and OSCP Software, Lot 2 for Contract for Utimaco HSMs for CA operation, and Lot 3 for Contract TSA Software. Full details of the individual contracts and the associated requirements are contained in the procurement documents.

Deadline

Deadline 2026-11-10

Hvem?

• Digitaliseringsstyrelsen

Hvad?

Hvor?

• Hovedstaden › Byen København
• Midtjylland › Vestjylland
• Oslo og Viken › Oslo

Indkøbshistorik

Dato	Dokument
2026-10-08	Udbudsbekendtgørelse

Udbudsbekendtgørelse (2026-10-08)
Objekt
Omfanget af udbuddet
Titel: Hardware and Software for NemLog-in CA component
Referencenummer: 51830f23-0eaf-476c-b8b3-fbc9bdb139ac
Kort beskrivelse:

Kontrakttype: Varer
Produkter/tjenester: Programpakker og informationssystemer 📦
Anslået værdi uden moms: 40 000 000 DKK 💰
Supplerende kontrakttype: Tjenesteydelser
Andre begrænsninger af opfyldelsesstedet: Hvor som helst i det pågældende land
Oplysninger om partier
Denne kontrakt er opdelt i partier ✅
Maksimalt antal partier, der kan tildeles én tilbudsgiver: 3
Der kan indgives bud for et maksimalt antal partier: 3

1️⃣
Intern ID: 6440f6cd-46f6-4a0e-9f7a-0210d63b1cb6
Titel: Contract for CA and OCSP Software
Anslået værdi uden moms: 20 000 000 DKK 💰
Beskrivelse af udbuddet:

The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Certification Authority (CA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The Contract covers the delivery of Standard Software, including Licences, Documentation and support necessary to operate CA and Validation Authority (VA) functionality as part of the Contracting Authority's trust services. The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, registration authority components, signing services, directory services and monitoring infrastructure, and must support the migration of the existing EJBCA-based CA environment while preserving certificate, revocation and audit-log integrity. The Supplier's principal obligations comprise: (a) the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test; (b) Ongoing Services, including support and maintenance of the Standard Software and security patching; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.

Yderligere produkter/tjenester: Diverse programpakker og computersystemer 📦
Land: Danmark 🇩🇰
Sted for udførelsen: Byen København 🏙️
Varighed: 120 måneder
Kriterier for tildeling
Pris ✅
Pris (justeringskoefficient): 40
Kvalitetskriterium (navn): Quality
Kvalitetskriterium (vægtning): 60
Titel
Partiets identifikationsnummer: LOT-0001

2️⃣
Intern ID: e81fe3a5-7b7f-44aa-8377-008d92f494dc
Titel: Contract for Utimaco HSM's for CA operation
Anslået værdi uden moms: 15 000 000 DKK 💰
Beskrivelse af udbuddet:

The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Hardware Security Modules (HSMs) for CA operation to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The lot covers the delivery of HSM, including the required client software, HSM simulator, smartcards, Documentation and support necessary to operate root CA and legacy issuing CA functionality as part of the Contracting Authority's trust services. The HSMs must integrate with the Contracting Authority's existing infrastructure, including KeyFactor EJBCA, monitoring infrastructure and associated operational processes, and must support the secure migration of the existing root CA and legacy issuing CA signing keys at cryptographic-module level while preserving the certification status and verifiability of the key material. The Supplier's principal obligations comprise: (a) the Delivery of Hardware, including associated client software, sized and configured for operation across two data centres in an active/active configuration, together with deployment in the Contracting Authority's production, staging, and test environments; (b) Ongoing Services, including support and maintenance of the Hardware, security patching, and technology refresh of Hardware during the term of the Contract to maintain valid certifications; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks) and Options and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.

Hovedsted eller sted for udførelsen:

At the time of publication of this procurement, the final delivery address cannot be specified. The goods covered by this procurement are intended for installation in data centres that are the subject of a separate procurement procedure. As a result, the Contracting Authority has not yet identified the future operating supplier or the final delivery location. The Contractor shall deliver the goods to the delivery address specified by the Contracting Authority. The delivery address will be located within Denmark. The Contracting Authority will provide the final delivery details within a reasonable period prior to the agreed delivery date.

Varighed: 12 måneder
Oplysninger om valgmuligheder
Indstillinger ✅
Beskrivelse af mulighederne:

The lot includes an Option to extend the deployment to a third data centre. Reference is made to Appendix 4 and 7 for further details.

Titel
Partiets identifikationsnummer: LOT-0002

3️⃣
Intern ID: e05eda2a-e66a-4a9b-a79d-5cd926dce029
Titel: Contract for TSA Software
Anslået værdi uden moms: 5 000 000 DKK 💰
Beskrivelse af udbuddet:

The Contracting Authority operates on behalf of the Danish State a national qualified and non-qualified trust service under Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (eIDAS2). As part of continuing the existing trust service on a new software platform, the Contracting Authority is procuring Timestamping Authority (TSA) Software to be installed and operated on-premise in the Contracting Authority's data centres (currently two). The lot covers the delivery of Standard Software, including Licences, Documentation and support and maintenance services necessary to operate TSA functionality as part of the Contracting Authority's trust services. The Software must integrate with the Contracting Authority's existing infrastructure, including HSMs, signing services and monitoring infrastructure, and must support the migration of the existing TSA service while preserving the qualified status and verifiability of historical timestamping records. The Supplier's principal obligations comprise: (a) the Delivery of Standard Software for development, test, staging and production environments, including the required software-only configuration for development and test; (b) Ongoing Services, including support and maintenance of the Standard Software and security patching; (c) Ordered Services, comprising Time-Based Services (services for installation, configuration, key ceremonies, and similar tasks); and (d) Cross-cutting Services, comprising Documentation and security, provided as an integral part of the Ongoing Services and Ordered Services throughout the term of the Contract.

Titel
Partiets identifikationsnummer: LOT-0003
Omfanget af udbuddet
Yderligere produkter/tjenester:

Databehandlingsmaskiner (hardware) 📦

Diverse programpakker og computersystemer 📦

Informationssystemer og servere 📦

+ 2 mere

It-programpakke 📦

Sikkerhedsprogrampakke 📦

Procedure
Type af procedure
Åben procedure ✅
Retsgrundlag: Direktiv 2014/24/EU
Hovedpunkterne i proceduren:

Participation in the procurement procedure can only take place electronically via the electronic procurement system used by the Contracting Authority. In order to gain access to the procurement documents, the tenderer must be registered or register as a user. If the tender contains several versions of the same document, the latest uploaded version shall prevail. All communication in connection with the procurement procedure, including questions and answers, shall take place via the electronic procurement system. For information regarding questions and answers, reference is made to the Tender Conditions and Appendix B. Interested parties are requested to keep themselves informed via the electronic procurement system. If the tenderer experiences problems with the system, support can be contacted via ETHICS Customer Service Denmark or by telephone (+45) 6313 3700. The tender must be submitted in English. The tenderer shall submit an ESPD together with its tender as preliminary evidence of the circumstances referred to in Section 148(1)(1)-(3) of the Danish Public Procurement Act. The tenderer is not required to sign its ESPD document. In the event of a group of economic operators (e.g. a consortium), a separate ESPD shall be submitted for each participating economic operator. If the tenderer is a group of economic operators, each participant’s ESPD document shall be signed by the respective participant. The lead tenderer submitting the application is not required to sign its ESPD document. If the tenderer relies on the capacities of other entities, an ESPD shall be submitted for each of the entities on whose capacities the tenderer relies, and the ESPD document shall be signed by the supporting entity. The tenderer may rely on the financial capacity of other entities in order to fulfil the suitability requirements, cf. sections III.1.2) and III.1.3). The entity or entities making their financial capacity available shall sign a commitment undertaking. If the tenderer relies on the economic and financial capacity of other entities in relation to fulfilment of the suitability requirements set out below, the Contracting Authority requires that the tenderer and the relevant entities shall be jointly and severally liable for the performance of the contract. The tenderer will be excluded from participation in the procurement procedure if the tenderer is subject to the mandatory exclusion grounds set out in Sections 134a, 135 and 136 of the Danish Public Procurement Act, unless the tenderer has provided sufficient documentation demonstrating that it is reliable pursuant to Section 138 of the Danish Public Procurement Act. Prior to the contract award decision, the tenderer whom the Contracting Authority intends to award the contract to shall provide documentation of the information submitted in the ESPD in accordance with Sections 151-152 of the Danish Public Procurement Act, cf. Section 153. As an alternative to the documentation referred to in Sections 153-155, 157 and 158 of the Danish Public Procurement Act, the tenderer may submit to the Contracting Authority a certificate of registration on an official list of approved economic operators, cf. Section 156, issued by the competent authority. The Contracting Authority can only accept a certificate of registration on an official list from tenderers established in the country maintaining the official list. The Contracting Authority may apply the procedure set out in Section 159(5) of the Danish Public Procurement Act if applications or tenders do not comply with the formal requirements of the procurement documents. No participation fee will be paid. It is noted that the estimated value constitutes an estimate of the expected contract value for all lots for the entire duration of the contracts, including the price of any options. The estimate is based on historical consumption and an expected economic scenario. Attention is drawn to the fact that the procurement procedure is subject to Article 5k of Council Regulation (EU) No 833/2014, as subsequently amended. The provision contains a prohibition against awarding contracts to Russian companies and Russian-controlled companies, etc. (see Article 5k(1) for the precise definition of the entities covered by the prohibition). The Contracting Authority reserves the right, at any time during the procurement procedure, to request documentation demonstrating that economic operators are not covered by the prohibition, for example by requesting a declaration to this effect and/or documentation regarding the place of establishment and ownership structure of the economic operators and any subcontractors. The document is available via the electronic procurement system.

Hovedpunkterne i proceduren

Retsgrundlag:

The tender procedure is covered by the Danish Public Procurement Act (Act No. 1564 of 15 December 2015 as amended), which implements the Public Procurement Directive (Directive 2014/24/EU).

Administrative oplysninger
Frist for modtagelse af bud eller ansøgninger om deltagelse: 2026-11-10 11:00:00 📅
Sprog, på hvilke bud eller ansøgninger om deltagelse kan indgives: engelsk 🗣️
Minimumsfrist, inden for hvilken tilbudsgiveren skal opretholde tilbuddet: 9 måneder
Udbudsbetingelser
Tilbudsgivere kan indgive mere end ét tilbud
Elektronisk fakturering: Påkrævet
Der vil blive anvendt elektronisk betaling ✅
Frist for anmodning om yderligere oplysninger: 2026-10-29 14:30:00 📅
Kriterier for tildeling
Vægtningstype: Vægtning (procentdel, præcis)

Juridiske, økonomiske, finansielle og tekniske oplysninger
Betingelser for deltagelse
Udvælgelseskriterium: Generel årlig omsætning
Liste og kortfattet beskrivelse af regler og kriterier:

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information. The tenderer's total annual turnover in the latest financial year(s) available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications. The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of requirements, see below, the tenderer and the entities in question will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity. Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate. Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: A statement regarding the operator's overall turnover in the latest annual report/financial statement available, depending on when the operator was established or started trading if the figures for this turnover are available. For groups of operators (e.g. a consortium), the information in the latest annual report/financial statement available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g., a parent company, a sister company or a subcontractor), information for such other entities must be provided as well. Minimum requirement: As a minimum requirement, a total annual turnover of at least DKK 20 million is required in the latest annual report/financial statement available. If the tenderer relies on the capacities of other entities, the turnover is to be calculated as the total turnover of the tenderer and such other entities in the latest annual report/financial statement available. For groups of operators (e.g., a consortium), the turnover is calculated as the total turnover of the operators in the latest annual report/financial statement available. The information is to be stated in section IV.B of the ESPD.

Liste og kortfattet beskrivelse af regler og kriterier

Udvælgelseskriterium: Andre økonomiske eller finansielle krav
Liste og kortfattet beskrivelse af regler og kriterier:

The tenderer must submit the European Single Procurement Document ("ESPD") with the following information: The tenderer's equity in the latest financial year available. In this procedure, the tenderer may rely on the economic and financial capacity of other operators to fulfil the suitability requirements. The operator(s) making its/their economic and financial capacity available to the tenderer must sign a letter of commitment, see further in the tender specifications. The form is enclosed as an attachment to the tender specifications. If the tenderer relies on the economic and financial capacity of other entities in relation to the fulfilment of the suitability requirements, the tenderer and the entities concerned will be required by the contracting entity to undertake joint and several liability for the performance of the contract. The ESPD serves as provisional documentation that the tenderer fulfils the requirements in respect of economic and financial capacity. Before the award decision is made, the tenderer to whom the contracting entity intends to award the contract must submit documentation that the information stated in the ESPD is accurate. Upon the contracting entity's request, the following documentation of economic and financial capacity must be submitted: The operator's balance sheet, or extracts thereof, from the latest annual report/financial statements available, where publication of the balance sheet is required under the law of the country in which the operator is established, or other documentation demonstrating the operator's equity. For groups of operators (e.g. a consortium), the relevant information from the latest annual report/financial statements available must be submitted for each participating operator in the group. Where an operator relies on the economic and financial capacity of other entities (e.g. a parent company, a sister company or a subcontractor), the corresponding information for such other entities must also be submitted. Minimum requirement: As a minimum requirement, the tenderer must have positive equity in the latest annual report/financial statements available. If the tenderer relies on the capacities of other entities, the equity is to be calculated as the combined equity of the tenderer and such other entities based on the latest annual report/financial statements available. For groups of operators (e.g. a consortium), the equity is calculated as the combined equity of the participating operators based on the latest annual report/financial statements available. The information is to be stated in Section IV.B of the ESPD.

Liste og kortfattet beskrivelse af regler og kriterier

Udelukkelsesgrund:

Børnearbejde og andre former for menneskehandel

Deltagelse i en kriminel organisation

Hvidvaskning af penge eller finansiering af terrorisme

+ 5 mere

Korruption

Svig

Terrorhandlinger eller strafbare handlinger med forbindelse til terroraktivitet

Tilsidesættelse af forpligtelser vedrørende betaling af bidrag til sociale sikringsordninger

Tilsidesættelse af forpligtelser vedrørende betaling af skatter og afgifter

Beskrivelse af udelukkelsesgrunde:

Has the economic operator itself or any person who is a member of its administrative, management or supervisory body or has powers of representation, decision or control therein been the subject of a conviction by final judgment for…

… corruption, by a conviction rendered at the most five years ago or in which an exclusion period set out directly in the conviction continues to be applicable? As defined in Article 3 of the Convention on the fight against corruption involving officials of the European Communities or officials of Member States of the European Union, OJ C 195, 25.6.1997, p. 1, and in Article 2(1) of Council Framework Decision 2003/568/JHA of 22 July 2003 on combating corruption in the private sector (OJ L 192, 31.7.2003, p. 54). This exclusion ground also includes corruption as defined in the national law of the contracting authority (contracting entity) or the economic operator.

… fraud, by a conviction rendered at the most five years ago or in which an exclusion period set out directly in the conviction continues to be applicable? Within the meaning of Article 1 of the Convention on the protection of the European Communities' financial interests (OJ C 316, 27.11.1995, p. 48).

… money laundering or terrorist financing, by a conviction rendered at the most five years ago or in which an exclusion period set out directly in the conviction continues to be applicable? As defined in Article 1 of Directive 2005/60/EC of the European Parliament and of the Council of 26 October 2005 on the prevention of the use of the financial system for the purpose of money laundering and terrorist financing (OJ L 309, 25.11.2005, p. 15).

… participation in a criminal organisation, by a conviction rendered at the most five years ago or in which an exclusion period set out directly in the conviction continues to be applicable? As defined in Article 2 of Council Framework Decision 2008/841/JHA of 24 October 2008 on the fight against organised crime (OJ L 300, 11.11.2008, p. 42).

… terrorist offences or offences linked to terrorist activities, by a conviction rendered at the most five years ago or in which an exclusion period set out directly in the conviction continues to be applicable? As defined in Articles 1 and 3 of Council Framework Decision of 13 June 2002 on combating terrorism (OJ L 164, 22.6.2002, p. 3). This exclusion ground also includes inciting or aiding or abetting or attempting to commit an offence, as referred to in Article 4 of that Framework Decision.

… child labour and other forms of trafficking in human beings, by a conviction rendered at the most five years ago or in which an exclusion period set out directly in the conviction continues to be applicable? As defined in Article 2 of Directive 2011/36/EU of the European Parliament and of the Council of 5 April 2011 on preventing and combating trafficking in human beings and protecting its victims, and replacing Council Framework Decision 2002/629/JHA (OJ L 101, 15.4.2011, p. 1).

Has the economic operator breached its obligations relating to the payment…

… social security contributions, both in the country in which it is established and in Member State of the contracting authority or contracting entity if other than the country of establishment?

… of taxes, both in the country in which it is established and in Member State of the contracting authority or contracting entity if other than the country of establishment?

Ordregivende myndighed
Navn og adresser
Navn: Digitaliseringsstyrelsen
Nationalt registreringsnummer: 34 05 11 78
Postadresse: Landgreven 4
Postnummer: 1301
Postby: København K
Region: Byen København 🏙️
Land: Danmark 🇩🇰
Enhed: Emil Sonne-Kuhberg
E-mail: emku@poulschmith.dk 📧
Telefon: 21757648 📞
Den ordregivende myndigheds type
Ministerium eller anden myndighed på nationalt plan eller forbundsplan
Hovedaktivitet
Generelle offentlige tjenesteydelser
Kommunikation
URL til dokumenter: https://www.ethics.dk/ethics/eo#/0494fefb-4fbb-4bf1-8547-c2bef7e3c125/publicMaterial 🌏
URL for deltagelse: https://www.ethics.dk/ethics/eo#/0494fefb-4fbb-4bf1-8547-c2bef7e3c125/homepage 🌏
Elektronisk indgivelse: Påkrævet

Supplerende oplysninger
Yderligere oplysninger

Yderligere oplysninger

Gennemgå organ
Navn: Klagenævnet for Udbud
Nationalt registreringsnummer: 37795526
Postadresse: Toldboden 2
Postnummer: 8800
Postby: Viborg
Region: Vestjylland 🏙️
Land: Danmark 🇩🇰
Enhed: Klagenævnet for Udbud
E-mail: klfu@naevneneshus.dk 📧
Telefon: +45 72405600 📞
URL: https://naevneneshus.dk/start-din-klage/klagenaevnet-for-udbud/ 🌏
Tjeneste, hvorfra der kan indhentes oplysninger om klageproceduren
Navn: Konkurrence- og Forbrugerstyrelsen
Nationalt registreringsnummer: 10294819
Postadresse: Carl Jacobsens Vej 35
Postnummer: 2500
Postby: Valby
Region: Byen København 🏙️
Enhed: Konkurrence- og Forbrugerstyrelsen
E-mail: kfst@kfst.dk 📧
Telefon: +45 41715000 📞
URL: https://www.kfst.dk 🌏
Oplysninger om elektroniske arbejdsgange
Elektronisk fakturering vil blive accepteret
Kilde: OJS 2026/S 197-701618 (2026-10-08)

Nye indkøb inden for beslægtede kategorier 🆕

Programpakker og informationssystemer (3 nye indkøb)