Certificate Lifecycle Management

Vendors to provide, implement, and support a comprehensive Certificate Lifecycle Management (CLM) solution.
- The objective of this initiative is to centrally manage the full lifecycle of digital certificates across the institution’s IT environment, improving security, compliance, and operational efficiency
- Solution will enable the University to:
• Discover, inventory, and monitor all digital certificates across on-premises and cloud environments.
• Automate certificate issuance, renewal, revocation, and replacement processes.
• Reduce service outages and security risks associated with expired or misconfigured certificates.
• Ensure compliance with institutional policies, industry standards, and Canadian regulatory requirements.
- Solution must demonstrate end-to-end certificate lifecycle automation—from discovery, issuance, renewal, deployment, validation, and rollback—for all supported platforms without requiring custom scripting wherever a native integration exists.
- Solution Provisioning
• Supply a robust CLM platform (SaaS, on-premises, or hybrid) capable of managing public
and private certificates.
• Support integration with major Certificate Authorities (CAs), including public and internal
PKI infrastructures.
- Discovery and Inventory
• Implement and configure automated discovery of certificates capability across servers, applications, network devices, endpoints, and cloud services.
• Provide a centralized, real-time inventory with reporting and alerting capabilities.
- Lifecycle Automation
• Enable automated certificate provisioning, renewal, and deployment.
• Support policy-based workflows and role-based access control.
• Support post-push scripting for custom device configurations.
• Provide alerting and notification mechanisms for pending expirations or anomalies.
- Integration and Compatibility
• Integrate with existing University systems (e.g., Active Directory, identity management platforms, web servers, security hardware or platform, and cloud services such as Microsoft Azure/AWS).
• Provide APIs or connectors for extensibility.
- Security and Compliance
• Ensure the solution adheres to industry security best practices and relevant Canadian data protection and privacy requirements.
• Support audit logging, reporting, and compliance monitoring.
- Implementation and Knowledge Transfer
• Provide implementation services, including installation, configuration, and testing.
• Deliver documentation and training for IT staff and administrators.
- Support and Maintenance
• Offer ongoing technical support, updates, and maintenance services.
• Define service level agreements (SLAs) for incident response and resolution.