REQUEST FOR INFORMATION: Wallet-relying party access certificates

RFI BACKGROUND The Finnish Transport and Communications Agency Traficom works to ensure the availability of well-functioning, safe, secure and reasonably priced transport and communications connections and services in Finland. The Finnish Transport and Communications Agency Traficom will become the supervisory authority in EU digital identity wallet ecosystem for Finland. Traficom already is the supervisory body for national electronic identification means and trust service providers under eIDAS act. In this new role, Traficom will take responsibility of registering the wallet relying parties for both private and public sector organization who will be part of the digital identity wallet ecosystem. Traficom will publish information of those available as set out in Article 5b(5) of Regulation (EU) No 910/2014. Traficom will create a new register for wallet-relying parties in Finland, which will be available at the end of 2026. The very first task is to find out solutions on how registered parties will get the wallet-relying party access certificate regarding CIR 2025/848 Article 7. Traficom conducts this RFI in order to ascertain certain aspects. This RFI contains questions in relation to Trust Service Providers which fulfill CIR 2025/848, ANNEX IV Requirements for wallet-relying party access certificates referred to in Article 7. The main goal is an open access to wallet-relying party data and allow a two-way communication, between the register and Certificate Authority provider. This will help private and public sector to register and get wallet-relying party access certificate in an easier way. This is also to avoid setting up a new Certificate Authority for this specific purpose and reuse existing infrastructure. GENERAL INFORMATION ABOUT THE RFI The purpose of this RFI is to find market offerings concerning the wallet-relying party access certificates. The aim of the RFI is to comprehensively obtain relevant information so that the potential procurement can be carried out in an appropriate manner. Decisions on the possible launch of the procurement process will be made after the RFI process. Please note that this RFI is not a call for tenders and all the information in the RFI is only preliminary. Hence, the preliminary information presented in this documentation can change in the possible upcoming procurement. Traficom is not obliged to publish a call for tenders. The decision about starting the actual procurement process shall be made after Traficom has completed the RFI process. Answering to the RFI does not bind to submitting a tender in the actual procurement process nor is it a prerequisite for subsequent participation in the invitation to tender. Traficom does not compensate the possible costs of answering to the RFI. ANSWERING TO THE RFI Please read carefully the below-mentioned questions: 1. Do you have plans to offer the technical implementation of EUID W-RP access certificates and the issuance of certificates as a service or do you offer such services already? You may include information about your current services, plans or any references you are willing to share in the context of this RFI. 2. What should be taken into account in the implementation of a national Wallet-relying party registry to make it more compatible with your current or future service? 3. When discussing the RA activity, is it preferrable to have the certificate to be implemented solely by you (or another private entity) or could it be a Finnish authority acting on your behalf? 4. Can you present an estimate for a price for the provision of the service on an annual basis? 5. Do you have any other comments about implementing Article 5b(5) of Regulation (EU) No 910/2014 and CIR 2025/848 Article 7(1) in Finland. Please describe. We kindly ask you to send your answers to the questions to the following e-mail address: eidas@traficom.fi We also ask you to give the necessary contact information (contact person and e-mail) regarding your answer. You can also ask for more information about the RFI from the above-mentioned e-mail address. Give your answers by the deadline presented further in this document. Traficom has the right to present further questions to those who answer the RFI. Traficom has also the right to arrange separate meetings if needed. These questions and/or meetings may take place already during the RFI period. CONFIDENTIALITY If your RFI answers include any trade secrets, please indicate them carefully and clearly. Trade secrets shall be kept secret in accordance with the Act on the Openness of Government Activities (621/1999). If your answers include classified information and you wish to use secure email, instructions on using our secure email can be found at: https://www.traficom.fi/en/traficom/contact-details/sending-secure-email-traficom The addressee in this case is the same as above (eidas@traficom.fi). Please note, that our secure email is approved for the national security level IV ("RESTRICTED, KÄYTTÖ RAJOITETTU") information but not for EU RESTRICTED information.