Q25-7678AL- Secrets and Certificate Management

THE NEW YORK POWER AUTHORITY (HEREAFTER, THE "AUTHORITY" OR "NYPA") INVITES YOU TO SUBMIT A PROPOSAL TO FURNISH ALL SUPERVISION, LABOR, MATERIALS AND EQUIPMENT (EXCEPT FOR SERVICES, MATERIALS AND/OR EQUIPMENT TO BE FURNISHED BY OTHERS AS SPECIFICALLY REFERRED TO IN THE CONTRACT DOCUMENTS) FOR THE FOLLOWING PROJECT:

This Request for Proposal (RFP) seeks a new solution for the following:

1. Tool is agnostic, centralized solution for “secrets” management. In cloud environments, “secrets” are critical pieces of information such as API keys, passwords, certificates, SSH keys (Secure Shell keys), encryption keys and any other keys within NYPA. They act as authentication tokens, granting access to various cloud resources and services. Like a fingerprint, a secret uniquely identifies and secures a particular cloud instance. The proposed system shall streamline the creation, assignment, discovery, rotation, expiry, auditing, of “secrets” and will enforce policies related to “secrets”. By implementing this solution, the goal is to enhance security, ensure compliance, and simplify the management of sensitive information across the cloud environment.
2. Tool offers a comprehensive solution that automates generation, identification of the certificate owners, management, monitoring, notifications and lifecycle handling of cryptographic digital certificates. The proposed system shall offer key benefits such as the tool identifies, catalogs, and manages digital certificates and the owners within NYPA's & Canal IT infrastructure, ensuring network security, compliance, and efficiency. The tool shall continuously monitor expiration dates, send timely email alerts to certificate owners and stakeholders for proactive renewal or replacement, maintain a centralized repository for streamlined management of expiration dates, issuance details, and renewal statuses, reducing overlooked certificates and offers comprehensive insights into certificate statuses, renewal trends, and promote risk areas, aiding in improved planning and decision-making.

NYPA is requesting vendors to provide the following in connection with their proposed solution(s) for (1) Secrets or (2) Certificate and/or both (1) and (2) for Secrets and Certificate Management :

• Software/Software Licenses preferably in the Cloud
• Software Implementation & Professional Services
• Training
• Software Support/Maintenance

Location of Event: Enterprise wide NYPA and Canals