Source: https://tendernation.io/opportunities/01a13bc3-c0cb-7095-8cde-f7a3651064ba/certificate-lifecycle-management-programme-core-services

pending GB open procedure Suitable for SMEs

# Certificate Lifecycle Management Programme Core Services

[Network Rail Infrastructure Limited](https://tendernation.io/buyers/network-rail-infrastructure-limited)

Estimated value

£800,000

Published

4 Nov 2025

Deadline

Rolling deadline

## Who can bid

- Buyer says suitable for SMEs

    The buyer ticked “suitable for SMEs” on the notice. Anyone can still bid.
- Buyer says suitable for VCSEs

    The buyer ticked “suitable for voluntary, community and social enterprises” on the notice.
- Open procedure

    Anyone can submit a full tender; there is no shortlisting stage.

[More contracts for small businesses and VCSEs](https://tendernation.io/opportunities/for-small-businesses)

## About this tender

Network Rail is seeking to engage the market regarding the future procurement of a Certificate Lifecycle Management (CLM) solution. This project is driven by significant industry changes, including the CA/Browser Forum's decision to reduce the maximum lifespan of public SSL/TLS certificates over the coming years. By 2029, certificates will require renewal as frequently as every 47 days, and domain validation reuse will be limited to just 10 days. These changes are intended to enhance security but will introduce substantial operational overhead, making manual certificate management impractical and automation essential.

Network Rail operates across a complex landscape of on-premises, cloud, and supplier-managed environments. A key challenge is the fragmented ownership and lack of central visibility over certificates, particularly those issued and managed by third-party suppliers. This fragmentation increases the risk of outages due to expired or misconfigured certificates and limits Network Rail's ability to monitor, renew, or enforce compliance directly.

The CLM project aims to address these challenges by implementing a solution that enables the centralised, automated management of certificates throughout their lifecycle, regardless of where they are issued or managed. The solution must provide comprehensive visibility across all environments, support robust automation for renewal and validation, and enable clear supplier accountability through contractual mechanisms. This includes the ability to track certificates managed by third parties, enforce renewal responsibilities, and ensure that incidents caused by supplier failures can be managed contractually.

Network Rail is inviting suppliers to demonstrate how their solutions can meet these requirements, including the ability to:

Centrally track and manage certificates across all environments and suppliers.

Automate certificate renewal, validation, and compliance processes.

Provide visibility and control over third-party issued certificates.

Support supplier accountability and contractual enforcement.

Align with upcoming industry standards and security requirements.

Deliver proven solutions at scale, with references from similar large infrastructure organisations.

We welcome responses from suppliers offering innovative, scalable, and future-proof approaches, including those with experience in complex, multi-stakeholder environments. Suppliers are encouraged to share relevant case studies, lessons learned, and any alternative models that could help Network Rail achieve its objectives.

This market engagement will inform Network Rail's approach to the procurement of a CLM solution that ensures security, operational resilience, and compliance in a rapidly evolving digital landscape.

Read full description

## CPV classification

Software-related services Software maintenance and repair services Software support services Computer-related professional services Information technology services Networking, Internet and intranet software development services IT services: consulting, software development, Internet and support Compliance software development services License management software development services Data security software development services

Source

Find a Tender (UK) · Notice ocds-h6vhtk-059daa-2025-11-04T15:40:13Z

[View official notice](https://www.find-tender.service.gov.uk/Notice/ocds-h6vhtk-059daa-2025-11-04T15:40:13Z)

Never miss a tender like this again

Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start.

[Track tenders free](https://tendernation.io/register)

[Buyer profile Network Rail Infrastructure Limited: past awards and live tenders](https://tendernation.io/buyers/network-rail-infrastructure-limited) [Sector More IT services tenders](https://tendernation.io/sectors/it-services)

## More tenders like this

[Computer facilities management services – IT-tjänster · Kalmar Läns Museum · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-8774-723e-83a8-af2cae60c2ed/sweden-computer-facilities-management-services-it-tjanster) [Software implementation services – DNS - Metada Platform - licence a související implementační, konzultační, analytické a školicí služby · DIAMO, státní podnik · 36 days left · 23 Nov 2026](https://tendernation.io/opportunities/01a15183-8989-719a-85fd-f036dc09b9df/czechia-software-implementation-services-dns-metada-platform-licence-a-s) [IT services: consulting, software development, Internet and support – Integrale ICT-dienstverlening · Stichting TWijs · 43 days left · 30 Nov 2026](https://tendernation.io/opportunities/01a15183-8078-70d7-8df3-40f25f4d83c5/netherlands-it-services-consulting-software-development-internet-and-suppor) [Software supply services – CRE\_2026\_092 Renouvellement des licences Varonis · CREOS Luxembourg S.A. · 27 days left · 15 Nov 2026](https://tendernation.io/opportunities/01a15183-411c-7086-9da9-540c2fa32c64/luxembourg-software-supply-services-cre-2026-092-renouvellement-des-licences) [Software supply services – Vergabe zur Ablösung der bestehenden SAP-Lösung im Bereich Personal · Westfälische Verkehrsgesellschaft mbH · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-0636-71ff-ab09-9dda4a94f77c/germany-software-supply-services-vergabe-zur-ablosung-der-bestehenden-sap-lo) [IT services: consulting, software development, Internet and support – L-Bank - Europaweite Vergabe einer KI-gestützten Lösung zur Verarbeitung von Elterngeldanträgen und Nachweisen im Verhandlungsverfahren mit Teilnahmewettbewerb nach VgV · Landeskreditbank Baden-Württemberg - Förderbank - (L-Bank) · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-95b1-7144-aa3a-6e4de7a75864/germany-it-services-consulting-software-development-internet-and-support)
