Section one: Contracting authority
one.1) Name and addresses
The Common Services Agency (more commonly known as NHS National Services Scotland) (NSS)
1 South Gyle Crescent
Edinburgh
EH12 9EB
Telephone
+44 1312756000
Country
United Kingdom
NUTS code
UKM - Scotland
Internet address(es)
Main address
http://www.nss.nhs.scot/browse/procurement-and-logistics
Buyer's address
https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA11883
one.2) Information about joint procurement
The contract is awarded by a central purchasing body
one.4) Type of the contracting authority
Body governed by public law
one.5) Main activity
Health
Section two: Object
two.1) Scope of the procurement
two.1.1) Title
Automated Certificate Management Solution
two.1.2) Main CPV code
- 72000000 - IT services: consulting, software development, Internet and support
two.1.3) Type of contract
Services
two.1.4) Short description
To help the DaS Directorate manage the number of certificates owned/used.
two.1.6) Information about lots
This contract is divided into lots: No
two.1.7) Total value of the procurement (excluding VAT)
Value excluding VAT: £86,129
two.2) Description
two.2.3) Place of performance
NUTS codes
- UKM - Scotland
two.2.4) Description of the procurement
NSS, along with many other businesses, utilise SSL/TLS certificates in order that users may establish and confirm the identity of our websites over the Internet or private networks; ultimately securing network communications.
The governing body for certificate-based communication is the Certificate Authority/Browser Forum (CA/B Forum). It brings together representatives from certificate-issuing authorities, major web browser providers, and software developers. The forum includes key industry leaders such as Google and Apple.
In April this year, The CA/B Forum officially voted to amend the TLS Baseline Requirements and initiate a process of certificate lifetime shortening, as per the following:
- As of March 15, 2026, the maximum lifetime for a TLS certificate will be 200 days.
- As of March 15, 2027, the maximum lifetime for a TLS certificate will be 100 days.
- As of March 15, 2029, the maximum lifetime for a TLS certificate will be 47 days.
As a result of which, given the number of certificates we own/use (more than 250) it will no longer be practical to continue to renew these manually, as per our current process.
To help manage this situation, an SBAR has been approved by DaS Directorate to progress with the purchase of a cloud hosted automated certificate management solution
two.2.5) Award criteria
Price
two.2.11) Information about options
Options: No
two.2.13) Information about European Union Funds
The procurement is related to a project and/or programme financed by European Union funds: No
Section four. Procedure
four.1) Description
four.1.1) Type of procedure
Award of a contract without prior publication of a call for competition in the cases listed below
- The procurement falls outside the scope of application of the regulations
Explanation:
Call off contract from the Scottish Government Software Value Added Reseller Services Framework.
four.1.8) Information about the Government Procurement Agreement (GPA)
The procurement is covered by the Government Procurement Agreement: Yes
Section five. Award of contract
A contract/lot is awarded: Yes
five.2) Award of contract
five.2.1) Date of conclusion of the contract
9 December 2025
five.2.2) Information about tenders
Number of tenders received: 1
Number of tenders received from SMEs: 0
Number of tenders received from tenderers from other EU Member States: 0
Number of tenders received from tenderers from non-EU Member States: 1
Number of tenders received by electronic means: 1
The contract has been awarded to a group of economic operators: No
five.2.3) Name and address of the contractor
Computacenter
Haston House, 2 Redheughs Rigg,, South Gyle
Edinburgh
EH12 9DQ
Telephone
+44 1313172373
Country
United Kingdom
NUTS code
- UK - United Kingdom
The contractor is an SME
No
five.2.4) Information on value of contract/lot (excluding VAT)
Total value of the contract/lot: £86,129
Section six. Complementary information
six.3) Additional information
(SC Ref:818444)
six.4) Procedures for review
six.4.1) Review body
Edinburgh Sheriff Court
27 Chambers Street
Edinburgh
EH1 1LB
Country
United Kingdom
six.4.3) Review procedure
Precise information on deadline(s) for review procedures
Economic operators should approach the contracting authority in the first instance. However, the only formal remedy is to apply to the courts:
An economic operator that suffers, or is at risk of suffering, loss or damage attributable to a breach of duty under the Public Contracts (Scotland) Regulations 2015 or the Procurement Reform (Scotland) Act 2014, may bring proceedings in the Sheriff Court or the Court of Session.