NATO Request for Information: NATO Public Key Infrastructure – Third Party Trust

The NATO Communications and Information Agency (NCIA) has issued a Request for Information (RFI) to identify qualified vendors for publicly trusted certificates. This RFI, designated 424314-NPKI-TPT, aims to gather input for an upcoming acquisition to support document signing, email signing, and TLS. NCIA is exploring solutions for qualified electronic signatures (QES) under EU eIDAS regulations, publicly trusted email signatures (S/MIME), client authentication certificates for enterprise use, and public-facing TLS certificates. The RFI outlines three potential acquisition models: procuring services from an existing Qualified Trust Service Provider (QTSP), a vendor deploying a CA infrastructure on behalf of NATO, or NATO deploying and operating its own CA with vendor advisory support. Interested companies from NATO member countries are invited to submit responses by January 5, 2026, detailing their technical capabilities, feedback on draft requirements, and pricing models for setup, recurring operational costs, per-certificate costs, and lifecycle extensions.