Iowa State University Ionwave #RFQ-1001476

Cloud-Hosted PKI and Network Onboarding Solution for Iowa State University

Iowa State University of Science and Technology (ISU) is seeking proposals for a cloud-hosted Public Key Infrastructure (PKI) and network onboarding solution to modernize its network authentication and device onboarding processes. - Government Buyer: - Iowa State University of Science and Technology (ISU), Information Technology Services (ITS) - Products/Services Requested: - Cloud-hosted PKI solution supporting certificate-based 802.1X EAP-TLS authentication for wired and wireless networks - Network onboarding solution for managed (Intune, JAMF), unmanaged, BYOD, and sponsored guest devices - Implementation, training, and ongoing technical support - Key Technical Requirements: - Integration with Cisco ISE as the sole RADIUS enforcement point (no parallel RADIUS infrastructure) - REST API for ITSM integration - Detailed audit logging and SIEM/syslog integration - Compliance with WCAG 2.1 Level AA digital accessibility standards - High availability (99.9% uptime SLA) and HSM-backed key protection - SCEP and EST certificate enrollment, customizable certificate templates, OCSP and CRL endpoints - Native Entra ID integration, SAML 2.0/OIDC federation - Support for Microsoft Intune, MECM, JAMF, and HPE/Aruba ClearPass - Self-service onboarding for guests, role-based access control, bulk operations, and reporting - Unique/Notable Requirements: - Vendors must provide a completed Higher Education Cloud Assessment Tool (HECVAT) and Voluntary Product Accessibility Template (VPAT) - Test login credentials required for digital accessibility review - OEMs and Vendors: - No specific OEMs or vendors are named; opportunity is open to qualified contractors

Description

Iowa State University of Science and Technology (ISU) is soliciting proposals from qualified contractors to provide a cloud-hosted Public Key Infrastructure (PKI) and network onboarding solution. The solution must replace the university's legacy network registration system and support certificate-based 802.1X EAP-TLS authentication across wired and wireless infrastructure for managed and unmanaged devices, as well as sponsored guests. The system must integrate with Cisco ISE as the sole RADIUS enforcement point, provide a REST API for ITSM integration, and detailed audit logging. The solicitation includes requirements for compliance with digital accessibility standards and a security and accessibility review prior to award.

View original listing