USAF - Entrust - MRAS

The General Services Administration (GSA), on behalf of the United States Air Force (USAF), is conducting market research to support the Platform One (P1) initiative. This effort is aimed at enhancing the USAF's Development Security Operations (DevSecOps) capabilities by ensuring robust security measures through the use of cloud technology. The primary goal is to bolster P1's ability to create and maintain secure software threat models and compliant code, which are essential for maintaining a zero-trust architecture within the Department of Defense's (DoD) digital environment.

The work involves leveraging Entrust's expertise in providing end-to-end security solutions through Public Key Infrastructure (PKI) and digital certificates. Entrust plays a crucial role by offering encryption and digital signature capabilities across various applications, thus ensuring secure communication between servers and end-users via Secure Sockets Layer (SSL) certificates. These SSL certificates must adhere to specific assurance criteria as part of the DoD PKI Interoperability program, thereby supporting P1's continuous authorization to operate securely within its mission framework.

Entrust's comprehensive security controls are pivotal in meeting compliance requirements across virtualization, public cloud, and containerized environments. The company's solutions include automated compliance features with real-time monitoring, unified policy enforcement, and administrative guardrails that enhance deployment security. This initiative will enable P1 to efficiently manage multiple sites requiring high-assurance SSL certificates while providing seamless support to DoD customers.

This contract also includes renewing licenses critical for P1 operations, with specific line items covering enterprise account pooling, advantage pooling for one year, wildcard pooling for one year, and additional SANs for OV certificates over a specified period. All licenses provided will comply with DoD regulatory guidelines, ensuring that security standards are consistently met throughout the contract duration.