Scout

CORHQ-26-Q-0128

FDIC's Digicert Subscription Maintenance

FEDERAL DEPOSIT INSURANCE CORPORATION > FEDERAL DEPOSIT INSURANCE CORPORATION > _

New Rejected
Actions
Open SAM.gov
Notice Type Solicitation
Due 2026-04-24
Posted 2026-04-21
NAICS 541512
PSC 7A21
Set-aside No Set aside used
Scout Score 21

Quick analysis

Brand-name restriction requires DigiCert OEM or Authorized Reseller status; amendment states FDIC will not consider equivalents. There is no evidence Trace holds DigiCert authorization.

Scope is commodity subscription maintenance (DigiCert Trust Lifecycle Manager + Premium Support) with a 1-year PoP; selection appears price-centric with minimal technical value-add for Trace.

Deadline is in three days from posting, leaving no practical path to obtain authorization or form a compliant prime bid. Teaming as a sub to an authorized reseller would flip this from a Trace-prime pursuit.

Scope summary

  • Provide pricing on Attachment B1 for all DigiCert Trust Lifecycle Manager subscription and support line items for 7/1/2026–6/30/2027.
  • Submit three volumes: Volume I – Pricing; Volume II – Additional Information; Volume III – SCRM Information (per 7.3.2-09).
  • Complete pre-award SCRM information declaring OEM/AM/Authorized Supplier status and provide manufacturer/subcontractor details (7.1.2-03).
  • Be DigiCert OEM or Authorized Reseller; FDIC will not accept equivalent solutions (Section L 7.3.1-16; Amendment 0001).
  • Include any Terms & Conditions/EULAs/MSAs with the quote; FDIC prefers Government-approved terms.
  • Active SAM.gov registration required prior to award.
  • Meet submission deadline: 12:00 PM ET on April 24, 2026.

Dimension scores

Total - 21/100
Technical Fit - 5/20

Requirement is commodity PKI subscription maintenance (DigiCert Trust Lifecycle Manager + premium support). While adjacent to Trace cybersecurity capabilities, it offers minimal technical value-add; no CDS/JADC2/SE&I scope. Evidence: Price Schedule line items; solicitation summary.

Past Performance - 5/20

Trace has relevant cybersecurity/IT O&M experience but no cited past performance with FDIC or civilian financial regulators. This is an adjacent mission fit, new agency. Evidence: company_profile lists DoD/DISA/AF/Space Force/MDA; no FDIC.

Vehicles / Contract Access - 6/10

Full and open RFQ; no restricted IDIQ/vehicle barrier. Set-aside: None. Evidence: opportunity metadata (NAICS 541512; No Set Aside).

Competitive Position - 1/15

Amendment restricts to DigiCert OEM or Authorized Resellers; competition will be among authorized channel partners. No evidence Trace is authorized; thus Trace is an underdog with a potential disqualifier. Evidence: Amendment 0001 and SCRM template requirement.

Risk - 2/15

Very high compliance risk due to brand-name reseller requirement and 3-day turnaround from posting to due date; new agency. Likely disqualifier if authorization is not held. Evidence: posted 4/21; due 4/24; Amendment 0001 brand-name requirement.

Strategic Value - 1/10

Transactional software subscription with limited strategic alignment; FDIC is not a target agency for Trace and scope is commodity resale. Evidence: company_profile target agencies do not include FDIC.

Compliance - 1/10

Solicitation requires OEM/Aftermarket Manufacturer/Authorized Supplier status for DigiCert; FDIC will not consider equivalents. No evidence Trace holds DigiCert authorization. Likely ineligible as a prime without teaming. Evidence: Attachment J1 note; Amendment 0001 statement; Section L 7.3.1-16 referenced.

Concerns

  • Brand-name restriction to DigiCert with authorization requirement limits eligibility.
  • No evidence of Trace DigiCert reseller status; potential disqualification as prime.
  • Very short turnaround from posting to due date hampers teaming or authorization acquisition.
  • Price-centric commodity buy with low margins reduces incentive even if compliant.
  • New agency (FDIC) with no visible Trace footprint increases uncertainty.
  • Partial solicitation extraction may omit additional compliance terms.

Teaming opportunities

  • Need a DigiCert Authorized Reseller (or OEM) as prime or formal teammate to satisfy eligibility.
  • Channel/OEM relationship needed to obtain valid DigiCert quote tied to FDIC Account ID 4775224.
  • Capability to complete SCRM template with manufacturer and subcontractor details.

Competitive position

  • No win themes recorded.

Bid/No bid factors

  • Amendment 0001: "FDIC will not consider equivalent solutions"; DigiCert-only.
  • Section L 7.3.1-16: eligibility limited to DigiCert OEM/Authorized Resellers.
  • SCRM template warns failure to declare OEM/AM/Authorized Supplier may render offer ineligible.
  • Q&A attachment contains no substantive guidance in extract; uncertain clarifications.
  • Price schedule shows all zeros in extract—must generate competitive OEM-backed pricing quickly.

Documents

Download all
Attachment B1 - Price Schedule.xlsx Download
Summary

Spreadsheet price schedule for FDIC ‘Digicert PKI Subscription Maintenance’ showing line-item subscriptions and support for a 7/1/2026–6/30/2027 base period; pricing fields in the extract are zeroed (likely placeholder). The sheet lists seat and certificate quantities and a small number of support items but does not show a populated total price, PoP location, incumbent, or contract vehicle information.

  • Document type: Attachment B1 — Price Schedule (Excel) for Digicert PKI Subscription Maintenance
  • Requirement title: Digicert PKI Subscription Maintenance (explicit)
  • Period of Performance (base period): 7/1/2026 – 6/30/2027
  • Line-item quantities: User seats 8,000; Server seats 1,000; Device seats 15,000 (plus an additional device-seat row with Qty 15); Online recurring seats 300; Organizational Certificate Qty 7; DigiCert Additional CA Private Qty 1; Digicert Premium Support seat qty 1
  • Purchase categories: SUBSCRIPTION (maintenance/ goods), SERVICES (support), PREMSUPP, ADDITIONAL
  • Pricing fields (List Price, Discount, Net Price, Extended Net Price) are all 0.0 in the extracted rows — appears to be placeholder or omitted pricing
  • Total Price field shown as 0.0 — no populated contract value in this extract
  • No place of performance, incumbent, or procurement vehicle listed in the sheet
  • Matches opportunity NAICS 541512 (Computer Systems Design Services) and relates to PKI/subscription — relevant to Trace’s cybersecurity and systems integration capabilities
Attachment J1 - Pre-Award SCRM Info - Example.xlsx Download
Summary

Pre-Award Supply Chain Risk Management (SCRM) information template that collects solicitation/part/model metadata and requires the offeror to declare their status as OEM, Aftermarket Manufacturer (AM), or Authorized Supplier, plus manufacturer and subcontractor names/addresses. The template warns that failing to provide one of the three required status categories may render an offer ineligible for award.

  • Explicit SCRM requirement: vendor must provide manufacturer and subcontractor names and addresses.
  • Offeror must state status as one of: OEM, Aftermarket Manufacturer (AM), or Authorized Supplier.
  • Failure to provide required status category may result in ineligibility for award — a hard compliance blocker.
  • Fields collected: Solicitation Number, Part Number, Name of good/software/service, Model/Version info — useful for mapping to specific line items (e.g., Digicert subscription items).
  • Applies to goods/software/services pre-award; likely required for award of the FDIC Digicert subscription maintenance tasking.
  • Implication for Trace: may need to document manufacturer/reseller status or identify subcontractors/suppliers if providing software subscriptions or managed services.
Attachment L1 - Q_A Spreadsheet.xlsx Download
Summary

Attachment L1 is a Q&A spreadsheet for the FDIC Digicert Subscription Maintenance solicitation. The extracted content shows only the Q&A header and placeholder rows (1.0–20.0) with no substantive questions or FDIC responses captured.

  • Document title: Attachment L1 - Q_A Spreadsheet; sheet named 'Q&A' — indicates a formal Q&A/clarification mechanism for the solicitation.
  • Header columns present: 'Applicable Document, Page #, Question, FDIC's Response' — format supports bidder questions and official FDIC answers.
  • Extraction contains only placeholder entries labeled 1.0 through 20.0 with no question text or responses — no clarifying technical, schedule, security, or performance details are available in this file.
  • Because no responses are present in the extract, this file does not provide evidence on scope details (e.g., number of certificates, contract duration), place of performance, incumbent, contract vehicle, or required clearances.
  • Presence of this attachment implies a Q&A record may exist elsewhere or in a fuller extraction; confirm the solicitation or other attachments for the complete Q&A before final scoring/decisioning.
CORHQ-26-Q-0128- Amendment 0001.pdf Download
Summary

Amendment 0001 to solicitation CORHQ-26-Q-0128 records FDIC responses to vendor questions: it confirms a brand-name restriction to DigiCert (per Section L, Clause 7.3.1-16) and provides supplier-required customer contact/account details for quoting. The amendment includes supplier-provided End User contact info, physical address, phone number, and a DigiCert Account ID.

  • Amendment identifier: CORHQ-26-Q-0128 / 0001 (solicitation amendment document).
  • Solicitation Section L, Clause 7.3.1-16 limits eligibility to DigiCert Authorized Resellers or the OEM (brand-name restriction).
  • FDIC response: "The FDIC will not consider equivalent solutions at this time." — no 'or equal' acceptance.
  • Supplier-provided End User contact: Federal Deposit Insurance Corporation; email pkihelp@fdic.gov.
  • Physical place of performance / customer address listed: 3501 Fairfax Drive, Arlington, Virginia 22201 US.
  • Telephone contact listed: 1-877-275-3342 (formatted in doc as 18772753342).
  • DigiCert Account ID provided for quoting: 4775224.
  • Document marked NONPUBLIC//FDIC BUSINESS# (sensitivity flag present).
CORHQ-26-Q-0128.pdf Download

Partially reviewed: Too large

Summary

Partially reviewed solicitation (sections 1 and 14 of 27 extracted) for FDIC Digicert PKI Subscription Maintenance (CORHQ-26-Q-0128). The requirement is subscription maintenance of DigiCert Trust Lifecycle Manager and related premium support with a one-year period of performance starting 7/1/2026; standard FDIC contract clauses (privacy, publicity restrictions, records retention, inspection) are included. Pricing fields in the extracted sections are blank and the full solicitation was not reviewed due to file size.

  • Requirement: Digicert PKI Subscription Maintenance (DigiCert Trust Lifecycle Manager + Premium Support).
  • Period of performance: 7/1/2026 – 6/30/2027 (line items show 1-year PoP).
  • Line-item quantities called out in extracted schedule: 8,000 user seats; 1,000 server seats; 15,000 device seats; additional device/certificate items (several small qty entries) and 300 recurring seats; premium support seat(s).
  • Solicitation identifier: CORHQ-26-Q-0128 (FDIC standard award/solicitation form present).
  • Agency: FDIC (corporate capacity is explicitly stated in clauses).
  • NAICS / Set-aside: Opportunity context shows NAICS 541512 and No Set Aside (noted in folder context).
  • Contract clauses called out in extracted text: Privacy Act obligations, public release/advertising restrictions, records retention (3 years), inspection & acceptance (FDIC 15 business days).
  • Pricing/total award amount not provided in extracted sections (price fields blank).
  • Document marked NONPUBLIC//FDIC BUSINESS# in header.
  • Review limitation: only sections 1 and 14 of 27 were extracted / file is partially reviewed due to being too large. No place-of-performance, incumbent, or clearance requirements visible in the extracted sections.
Technical details

Entry: sync

Review status: Up to date

Logical upstream opportunity: 25070

Notice lineage:

  • b79aed88b2e9409f88fac13a92d6392f (posted 2026-04-21) - current
  • 53fdb80d0b02473592c5f89f63a531bd

Last synced: 2026-04-21T18:14:45.560614+00:00

Last analyzed: 2026-04-21T18:16:52.941811+00:00

Latest package fingerprint: 48641d34cfd42df885efae21071909f7a005954d07fa76a15be024eb5131d1e5

Latest package notice: b79aed88b2e9409f88fac13a92d6392f

Latest package documents: 5

Evidence limitations
  • CORHQ-26-Q-0128.pdf: partially reviewed (too large)
Recent package history
  • 2026-04-21T18:14:45.562500+00:00: b79aed88b2e9409f88fac13a92d6392f with 5 docs

Labels

Human notes

No human notes yet.

Qualification Settings

Included notice types

Scope Filters

Use one code or phrase per line, or comma-separate.

System Settings

Runtime

Custom Search

Search time

These filters apply only to this run. Qualification settings stay unchanged.

Custom Search queries Fetchmesh and stores the results in Scout without mutating the default sync configuration.

Workspace visibility

All custom searches are public for now.

Included notice types

Scope Filters

Use one code or phrase per line, or comma-separate.

Browse Searches