CORHQ-26-Q-0128
FDIC's Digicert Subscription Maintenance
FEDERAL DEPOSIT INSURANCE CORPORATION > FEDERAL DEPOSIT INSURANCE CORPORATION > _
Quick analysis
Brand-name restriction requires DigiCert OEM or Authorized Reseller status; amendment states FDIC will not consider equivalents. There is no evidence Trace holds DigiCert authorization.
Scope is commodity subscription maintenance (DigiCert Trust Lifecycle Manager + Premium Support) with a 1-year PoP; selection appears price-centric with minimal technical value-add for Trace.
Deadline is in three days from posting, leaving no practical path to obtain authorization or form a compliant prime bid. Teaming as a sub to an authorized reseller would flip this from a Trace-prime pursuit.
Scope summary
- Provide pricing on Attachment B1 for all DigiCert Trust Lifecycle Manager subscription and support line items for 7/1/2026–6/30/2027.
- Submit three volumes: Volume I – Pricing; Volume II – Additional Information; Volume III – SCRM Information (per 7.3.2-09).
- Complete pre-award SCRM information declaring OEM/AM/Authorized Supplier status and provide manufacturer/subcontractor details (7.1.2-03).
- Be DigiCert OEM or Authorized Reseller; FDIC will not accept equivalent solutions (Section L 7.3.1-16; Amendment 0001).
- Include any Terms & Conditions/EULAs/MSAs with the quote; FDIC prefers Government-approved terms.
- Active SAM.gov registration required prior to award.
- Meet submission deadline: 12:00 PM ET on April 24, 2026.
Dimension scores
Requirement is commodity PKI subscription maintenance (DigiCert Trust Lifecycle Manager + premium support). While adjacent to Trace cybersecurity capabilities, it offers minimal technical value-add; no CDS/JADC2/SE&I scope. Evidence: Price Schedule line items; solicitation summary.
Trace has relevant cybersecurity/IT O&M experience but no cited past performance with FDIC or civilian financial regulators. This is an adjacent mission fit, new agency. Evidence: company_profile lists DoD/DISA/AF/Space Force/MDA; no FDIC.
Full and open RFQ; no restricted IDIQ/vehicle barrier. Set-aside: None. Evidence: opportunity metadata (NAICS 541512; No Set Aside).
Amendment restricts to DigiCert OEM or Authorized Resellers; competition will be among authorized channel partners. No evidence Trace is authorized; thus Trace is an underdog with a potential disqualifier. Evidence: Amendment 0001 and SCRM template requirement.
Very high compliance risk due to brand-name reseller requirement and 3-day turnaround from posting to due date; new agency. Likely disqualifier if authorization is not held. Evidence: posted 4/21; due 4/24; Amendment 0001 brand-name requirement.
Transactional software subscription with limited strategic alignment; FDIC is not a target agency for Trace and scope is commodity resale. Evidence: company_profile target agencies do not include FDIC.
Solicitation requires OEM/Aftermarket Manufacturer/Authorized Supplier status for DigiCert; FDIC will not consider equivalents. No evidence Trace holds DigiCert authorization. Likely ineligible as a prime without teaming. Evidence: Attachment J1 note; Amendment 0001 statement; Section L 7.3.1-16 referenced.
Concerns
- Brand-name restriction to DigiCert with authorization requirement limits eligibility.
- No evidence of Trace DigiCert reseller status; potential disqualification as prime.
- Very short turnaround from posting to due date hampers teaming or authorization acquisition.
- Price-centric commodity buy with low margins reduces incentive even if compliant.
- New agency (FDIC) with no visible Trace footprint increases uncertainty.
- Partial solicitation extraction may omit additional compliance terms.
Teaming opportunities
- Need a DigiCert Authorized Reseller (or OEM) as prime or formal teammate to satisfy eligibility.
- Channel/OEM relationship needed to obtain valid DigiCert quote tied to FDIC Account ID 4775224.
- Capability to complete SCRM template with manufacturer and subcontractor details.
Competitive position
- No win themes recorded.
Bid/No bid factors
- Amendment 0001: "FDIC will not consider equivalent solutions"; DigiCert-only.
- Section L 7.3.1-16: eligibility limited to DigiCert OEM/Authorized Resellers.
- SCRM template warns failure to declare OEM/AM/Authorized Supplier may render offer ineligible.
- Q&A attachment contains no substantive guidance in extract; uncertain clarifications.
- Price schedule shows all zeros in extract—must generate competitive OEM-backed pricing quickly.
Documents
Download all
Attachment B1 - Price Schedule.xlsx
Download
Spreadsheet price schedule for FDIC ‘Digicert PKI Subscription Maintenance’ showing line-item subscriptions and support for a 7/1/2026–6/30/2027 base period; pricing fields in the extract are zeroed (likely placeholder). The sheet lists seat and certificate quantities and a small number of support items but does not show a populated total price, PoP location, incumbent, or contract vehicle information.
- Document type: Attachment B1 — Price Schedule (Excel) for Digicert PKI Subscription Maintenance
- Requirement title: Digicert PKI Subscription Maintenance (explicit)
- Period of Performance (base period): 7/1/2026 – 6/30/2027
- Line-item quantities: User seats 8,000; Server seats 1,000; Device seats 15,000 (plus an additional device-seat row with Qty 15); Online recurring seats 300; Organizational Certificate Qty 7; DigiCert Additional CA Private Qty 1; Digicert Premium Support seat qty 1
- Purchase categories: SUBSCRIPTION (maintenance/ goods), SERVICES (support), PREMSUPP, ADDITIONAL
- Pricing fields (List Price, Discount, Net Price, Extended Net Price) are all 0.0 in the extracted rows — appears to be placeholder or omitted pricing
- Total Price field shown as 0.0 — no populated contract value in this extract
- No place of performance, incumbent, or procurement vehicle listed in the sheet
- Matches opportunity NAICS 541512 (Computer Systems Design Services) and relates to PKI/subscription — relevant to Trace’s cybersecurity and systems integration capabilities
Attachment J1 - Pre-Award SCRM Info - Example.xlsx
Download
Pre-Award Supply Chain Risk Management (SCRM) information template that collects solicitation/part/model metadata and requires the offeror to declare their status as OEM, Aftermarket Manufacturer (AM), or Authorized Supplier, plus manufacturer and subcontractor names/addresses. The template warns that failing to provide one of the three required status categories may render an offer ineligible for award.
- Explicit SCRM requirement: vendor must provide manufacturer and subcontractor names and addresses.
- Offeror must state status as one of: OEM, Aftermarket Manufacturer (AM), or Authorized Supplier.
- Failure to provide required status category may result in ineligibility for award — a hard compliance blocker.
- Fields collected: Solicitation Number, Part Number, Name of good/software/service, Model/Version info — useful for mapping to specific line items (e.g., Digicert subscription items).
- Applies to goods/software/services pre-award; likely required for award of the FDIC Digicert subscription maintenance tasking.
- Implication for Trace: may need to document manufacturer/reseller status or identify subcontractors/suppliers if providing software subscriptions or managed services.
Attachment L1 - Q_A Spreadsheet.xlsx
Download
Attachment L1 is a Q&A spreadsheet for the FDIC Digicert Subscription Maintenance solicitation. The extracted content shows only the Q&A header and placeholder rows (1.0–20.0) with no substantive questions or FDIC responses captured.
- Document title: Attachment L1 - Q_A Spreadsheet; sheet named 'Q&A' — indicates a formal Q&A/clarification mechanism for the solicitation.
- Header columns present: 'Applicable Document, Page #, Question, FDIC's Response' — format supports bidder questions and official FDIC answers.
- Extraction contains only placeholder entries labeled 1.0 through 20.0 with no question text or responses — no clarifying technical, schedule, security, or performance details are available in this file.
- Because no responses are present in the extract, this file does not provide evidence on scope details (e.g., number of certificates, contract duration), place of performance, incumbent, contract vehicle, or required clearances.
- Presence of this attachment implies a Q&A record may exist elsewhere or in a fuller extraction; confirm the solicitation or other attachments for the complete Q&A before final scoring/decisioning.
CORHQ-26-Q-0128- Amendment 0001.pdf
Download
Amendment 0001 to solicitation CORHQ-26-Q-0128 records FDIC responses to vendor questions: it confirms a brand-name restriction to DigiCert (per Section L, Clause 7.3.1-16) and provides supplier-required customer contact/account details for quoting. The amendment includes supplier-provided End User contact info, physical address, phone number, and a DigiCert Account ID.
- Amendment identifier: CORHQ-26-Q-0128 / 0001 (solicitation amendment document).
- Solicitation Section L, Clause 7.3.1-16 limits eligibility to DigiCert Authorized Resellers or the OEM (brand-name restriction).
- FDIC response: "The FDIC will not consider equivalent solutions at this time." — no 'or equal' acceptance.
- Supplier-provided End User contact: Federal Deposit Insurance Corporation; email pkihelp@fdic.gov.
- Physical place of performance / customer address listed: 3501 Fairfax Drive, Arlington, Virginia 22201 US.
- Telephone contact listed: 1-877-275-3342 (formatted in doc as 18772753342).
- DigiCert Account ID provided for quoting: 4775224.
- Document marked NONPUBLIC//FDIC BUSINESS# (sensitivity flag present).
CORHQ-26-Q-0128.pdf
Download
Partially reviewed: Too large
Partially reviewed solicitation (sections 1 and 14 of 27 extracted) for FDIC Digicert PKI Subscription Maintenance (CORHQ-26-Q-0128). The requirement is subscription maintenance of DigiCert Trust Lifecycle Manager and related premium support with a one-year period of performance starting 7/1/2026; standard FDIC contract clauses (privacy, publicity restrictions, records retention, inspection) are included. Pricing fields in the extracted sections are blank and the full solicitation was not reviewed due to file size.
- Requirement: Digicert PKI Subscription Maintenance (DigiCert Trust Lifecycle Manager + Premium Support).
- Period of performance: 7/1/2026 – 6/30/2027 (line items show 1-year PoP).
- Line-item quantities called out in extracted schedule: 8,000 user seats; 1,000 server seats; 15,000 device seats; additional device/certificate items (several small qty entries) and 300 recurring seats; premium support seat(s).
- Solicitation identifier: CORHQ-26-Q-0128 (FDIC standard award/solicitation form present).
- Agency: FDIC (corporate capacity is explicitly stated in clauses).
- NAICS / Set-aside: Opportunity context shows NAICS 541512 and No Set Aside (noted in folder context).
- Contract clauses called out in extracted text: Privacy Act obligations, public release/advertising restrictions, records retention (3 years), inspection & acceptance (FDIC 15 business days).
- Pricing/total award amount not provided in extracted sections (price fields blank).
- Document marked NONPUBLIC//FDIC BUSINESS# in header.
- Review limitation: only sections 1 and 14 of 27 were extracted / file is partially reviewed due to being too large. No place-of-performance, incumbent, or clearance requirements visible in the extracted sections.
Technical details
Entry: sync
Review status: Up to date
Logical upstream opportunity: 25070
Notice lineage:
- b79aed88b2e9409f88fac13a92d6392f (posted 2026-04-21) - current
- 53fdb80d0b02473592c5f89f63a531bd
Last synced: 2026-04-21T18:14:45.560614+00:00
Last analyzed: 2026-04-21T18:16:52.941811+00:00
Latest package fingerprint: 48641d34cfd42df885efae21071909f7a005954d07fa76a15be024eb5131d1e5
Latest package notice: b79aed88b2e9409f88fac13a92d6392f
Latest package documents: 5
Evidence limitations- CORHQ-26-Q-0128.pdf: partially reviewed (too large)
- 2026-04-21T18:14:45.562500+00:00: b79aed88b2e9409f88fac13a92d6392f with 5 docs
Labels
Human notes
No human notes yet.