Central Office, Information Technology/BPR Dept., 2nd Floor, Jeevan-Seva Annexe, Santacruz (W), Mumbai

Transcription

1 Central Office, Information Technology/BPR Dept., 2nd Floor, Jeevan-Seva Annexe, Santacruz (W), Mumbai Ref: CO/IT-BPR/SSL-Cert/ /RC-SSL-DC /Rev Notice Inviting Quotations/Rates - for Empanelment -cum-rate Contract for supply of DSC and SSL and esign. Last Submission Date for the Sealed Cover Response: 21 st March 2018(Wednesday) 3.00 P.M. Life Insurance Corporation of India (hereinafter referred to as LIC ), a statutory corporation established under section 3 of Life Insurance Corporation Act 1956 (XXXI of 1956) and having its Corporate Office at Yogakshema, Jeevan Bima Marg, Mumbai LIC intends to make empanelment of vendors for procurement on rate contract basis, of the following items as per business needs from Licensed CAs, Authorised Providers and CCA Empanelled e-sign Service Providers : Sl Item 1 SSL Certificates with 3 2 Years Validity for Web Sites from trusted global certifying authority. 2 SSL Certificates with Extended Validation (EV) with 2 Years Validity for Web Sites from trusted global certifying authority. 3 SSL Certificates Unified Communications Multi Domain ( Pack of 5 Domains) from trusted global certifying authority. 3 2 Years Validity. 4 Cost of Extra SAN. 5 RCAI Class 2 DSC ( Signing and Encryption with 2 years Validity with Org Name ) 6 RCAI Class 3 DSC (Signing and Encryption with 2 years Validity with Org Name ) 7 RCAI Class 3 SSL Certificate ( Validity 2 years ) for Server to Server 8 FIPS Certified e-token - USB Token 9 Wildcard Certificate SSL Certificates with 3 2 Years Validity for Web Sites from trusted CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 1 of 26

2 root CA Example *.licindia.in or *.onlinelic.in 10 Document Signer Certificate (Supported by UIDAI APIs),Class 2, File Based, Validity : 3 Years, Issued to Organisational Legal Name Life Insurance Corporation of India, Issued by CAs under Root Certifying Authority of India (RCAI) CCA India. 11 Empanelled e-sign Service Providers - e-sign Services Per Transaction Price (All Inclusive including UIDAI KYC and Integration with LIC Business Applications ) from CCA Empanelled e-sign Service Providers ( Note: One Successful e-sign Transaction to enable digitally signing upto 10 PDF documents with multiple pages, multiple places with one UIDAI Aadhaar authentication) This Empanelment cum Rate Contract will be valid for a period of two (2) year. Bids would be evaluated independently for each item. LIC would empanel bidder against each item who meets the Mandatory Technical Specifications, independently for the item and whose commercial bid, is found to be Lowest Commercial Bid(L1) for that items. L1 bidder for item 3 will have the right to match the L1 price for item 4. LIC may decide to not empanel bidder for any or all the items. In case the L1 bidder expresses his inability or fails to deliver items within the stipulated timeline, LIC may decide to provide opportunity to the L2 bidder for the same, provided L2 bidder agrees to match the price quoted by L1 bidder. Definitions : L1 Bidder - Bidder with L1 quote L2 Bidder Bidder with the next higher quotation to the L1 Quote L1 quote - Lowest price discovered for the item through the commercial evaluation for the bidder meeting the mandatory technical specifications. Sealed quotations/rates on company letter head are invited from the Certifying Authorities or Authorised suppliers or CCA Empanelled e-sign Service Providers in India for the supply of mentioned items complying with the specifications mentioned in this notice. No minimum quantities of SSL/DSC/eTokens / e-sign transactions are assured to Empanelled Certifying Authorities or Authorised Suppliers in India or CCA Empanelled e-sign Service Provider. Interested eligible parties are required to submit their bids in a sealed envelope and marked Sealed Quotations/Rates for Empanelment cum - Rate Contract for supply of DSC / SSL / esign(portal). Not to be Opened Before 3.00 PM on 21 st March CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 2 of 26

3 The validity of the submitted quotations must be for two year. LIC at its discretion may extend the validity of prices by another one year. The quotation should reach in sealed cover to LIC on or before 21 st March 2018, Wednesday by 3.00 PM at the following address: Executive Director (IT/BPR), Life Insurance Corporation of India, Central Office, Information Technology Department, 2nd Floor, South Wing, Portal Section, "Jeevan Seva Annexe", S. V. Road, Santacruz(W), Mumbai co_ittenders@licindia.com LIC reserves the right to accept/reject any/all offers without assigning any reason whatsoever. Bidders to make submission in sealed envelope in prescribed Forms as provided herewith on their letter head duly signed by Authorised Signatory and stamped. Late Bids a. Quotations/Rates received after the due date and the specified time for any reason whatsoever, shall not be entertained and shall be returned unopened. b. The bids submitted by telex/telegram/ fax/ etc. shall not be considered. No correspondence will be entertained on this matter. c. Life Insurance Corporation of India shall not be responsible for any postal delay or nonreceipt/ non-delivery of the documents. No further correspondence on the subject will be entertained. d. Life Insurance Corporation of India reserves the right to modify and amend any of the above-stipulated condition/criterion depending upon priorities vis-à-vis urgent commitments. Query/Clarifications : to co_ittenders@licindia.com CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 3 of 26

4 <Form 1 : Submission : On letter head of the Bidder> Item 1 : SSL Certificates with 3 2 Years Validity for Web Sites and Server to Server Security. Mandatory Technical Specifications S.No. Features and benefits Compliance Remarks 1 Contain extensions that allow this certificate to be used for browser-toserver and server-to-server security 2 Contain extensions that allow this certificate to be used for server authentication : -Domain Validation -Organization Validation 3 Can secure web servers with multiple names year validity bit SSL encryption between Web servers and browsers; 6 Trusted by more than 99+ percent of all browsers, most mobile and smart phone applications 7 Unlimited free re-issue guarantee within certificate lifetime 8 Accompanied by round-the-clock online support by chat, web, phone and etc. 24/7 Customer Support 9 Free Certificate Management Services: for automated lifecycle management for inventories of SSL certificates. 10 Free online order tracking and customer account capabilities: renew, revoke, and replace online 11 Ability to secure virtual web servers using the same SSL certificate via the Subject Alternative Name (SubjectAltName) extension 12 Full organization validation 13 Should support Server Operating System : CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 4 of 26

5 Web Server on Apache on redhat RHEL AS, Citrix netscalar application switch and Citrix access gateway 14 Signature algorithm - SHA256withRSA with 2048-bit Encryption Key 15 Secure Site Seal 16 Unlimited Server Coverage 17 Free Site Seal included 18 Shows Padlock Icon 19 Time to Issue 5 days 20 Issuer/Certification Authority. Must be a trusted global certifying authority. 21 Atleast two Public Domain/URL of organizations where proposed SSL certificates have been used for Internet facing commercial business application Internet Banking/eCommerce / Self Service Applications. 22 Contact Details Name and Title of Official Mobile No : Authorized Signature: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 5 of 26

6 <FORM 2 : On letter head of the Bidder> Item 2 : SSL Certificates with Extended Validation (EV) with 2 Years Validity for Internet Web Sites. Mandatory Technical Specifications S.No. Features and benefits Compliance Remarks 1 Contain extensions that allow this certificate to be used for browser-toserver and server-to-server security 2 Contain extensions that allow this certificate to be used for server authentication : -Domain Validation -Organization Validation 3 Shows Green Address Bar 4 2 year validity bit SSL encryption between Web servers and browsers 6 Trusted by more than 99+ percent of all browsers, most mobile and smart phone applications 7 Unlimited free re-issue guarantee within certificate lifetime 8 Accompanied by round-the-clock online support by chat, web, phone and etc. 24/7 Customer Support 9 Free Certificate Management Services: for automated lifecycle management for inventories of SSL certificates. 10 Free online order tracking and customer account capabilities: renew, revoke, and replace online 11 Shows Prefix 12 Full domain validation and organization validation 13 Should support Server Operating System : Web Server on Apache on redhat RHEL AS, Citrix netscalar application switch and Citrix access gateway CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 6 of 26

7 14 Signature algorithm - SHA256withRSA with 2048-bit Encryption Key 15 Secure Site Seal 16 Unlimited Server Coverage 17 Free Site Seal included 18 Shows Padlock Icon 19 Time to Issue 5 days 20 Issuer/Certification Authority Must be a trusted global certifying authority. Name: 21 Atleast two Public Domain/URL of organizations where proposed SSL certificates have been used for Internet facing commercial business application Internet Banking/eCommerce/Self Service Applications Contact Details Name and Title of Official Mobile No : Authorized Signature: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 7 of 26

8 <FORM 3 On letter head of the Bidder> 3. SSL Certificates Unified Communications Multi Domain ( Pack of 5 Domains) 3 2 Years Validity. Mandatory Technical Specifications S.No. Features and benefits Compliance Remarks 1 Contain extensions that allow this certificate to be used for browser-toserver and server-to-server security 2 Contain extensions that allow this certificate to be used for server authentication : -Domain Validation -Organization Validation 3 Can secure web servers with multiple names year validity bit SSL encryption between Web servers and browsers 6 Trusted by more than 99+ percent of all browsers, most mobile and smart phone applications 7 Unlimited free re-issue guarantee within certificate lifetime 8 Accompanied by round-the-clock online support by chat, web, phone and etc. 24/7 Customer Support 9 Free Certificate Management Services: for automated lifecycle management for inventories of SSL certificates. 10 Free online order tracking and customer account capabilities: renew, revoke, and replace online 11 Able to secure 10 or more hostnames on a server with the same SSL certificate using X.509v3 Subject Alternative Name (Subject Alt Name) extensions 12 Full organization validation 13 Should support multiple secure CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 8 of 26

9 13a communications protocols and may need to process communications for multiple domains and multiple hostnames within domains Compatible with Microsoft Exchange 2007/10 and Microsoft Office Communications Server 2007/10 14 Signature algorithm - SHA256withRSA with 2048-bit Encryption Key 15 Secure Site Seal 16 Unlimited Server Coverage 17 Free Site Seal included 18 Shows Padlock Icon 19 Time to Issue 5 days 20 Issuer/Certification Authority Must be a trusted global certifying authority. Name: 21 Atleast two Domain/URL of organizations where proposed SSL certificates have been used for Internet facing commercial business application Internet Banking/eCommerce/Self Service Applications. 22 Contact Details Name and Title of Official Mobile No : Authorized Signature: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 9 of 26

10 <FORM 5 On letter head of the Bidder> 5. RCAI Class 2 DSC ( Signing and Encryption with 2 years Validity with Org Name ) Mandatory Technical Specifications S.No. Features and benefits Compliance Remarks 1 RCAI Class 2 DSC ( Signing and Encryption with 2 years Validity with Org Name ) 2 2 year validity 3 Signing and Encryption 4 With Organisation Name 5 Suitable for Signing, eprocurement ( eprocure.gov.in) 5 Licensed CAs by Root Certifying Authority (RCAI) of India Name of CA : 6 Contact Details Name and Title of Official Mobile No : Authorized Signature: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 10 of 26

11 <FORM 6 On letter head of the Bidder> 6. RCAI Class 3 DSC (Signing and Encryption with 2 years Validity with Org Name ) Mandatory Technical Specifications S.No. Features and benefits Compliance Remarks 1 RCAI Class 3 DSC (Signing and Encryption with 2 years Validity with Org Name ) 2 2 year validity 3 Signing and Encryption 4 With Organisation Name 5 Suitable for Signing, eprocurement ( eprocure.gov.in) 5 Licensed CAs by Root Certifying Authority (RCAI) of India Name of CA : 6 Contact Details Name and Title of Official Mobile No : Authorized Signature: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 11 of 26

12 <FORM 7 On letter head of the Bidder> Item 7 : RCAI Class 3 SSL Certificate ( Validity 2 years ) for Server to Server Mandatory Technical Specifications S.No. Features and benefits Compliance Remarks 1 Contain extensions that allow this certificate to be used for browser-toserver and server-to-server security 2 Contain extensions that allow this certificate to be used for server authentication : -Domain Validation -Organization Validation 3 2 year validity bit SSL encryption between Web servers and browsers; 5 Should support Server Operating System : Web Server on Apache on redhat RHEL AS, Citrix netscalar application switch and Citrix access gateway 6 Signature algorithm - SHA256withRSA with 2048-bit Encryption Key 7 Time to Issue 5 days 8 Issuer/Certification Authority 9 Atleast two Domain/URL of organizations where proposed SSL certificates have been used for Internet facing commercial business application Internet Banking/eCommerce /Self Service Applications. 10 Contact Details CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 12 of 26

13 Name and Title of Official Mobile No : Authorized Signature: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 13 of 26

14 <FORM 8 On letter head of the Bidder> Item 8 : FIPS Certified e-token - USB Token Mandatory Technical Specifications S.No. Features and benefits Compliance Remarks 1 FIPS Certified e-token - USB Token 2 Suitable for the above stated Digital Signature Certificates i.e RCAI Class 2 SSL Certificate RCAI Class 3 SSL Certificate 3 e-token is provided with drivers for windows xp, 7, 8 and above 4 e-token is provided with drivers for Redhat Linux 5 CCA (Govt of India) notified FIPS certified tokens 6 Plug n Play ( Built in driver) 7 Contact Details Name and Title of Official Mobile No : Authorized Signature: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 14 of 26

15 Form 9 Wildcard Certificate SSL Certificates with 3 2 Years Validity for Web Sites from trusted root CA Example *.licindia.in or *.onlinelic.in Item 9 : Wildcard Certificate SSL Certificates with 3 2 Years Validity for Web Sites. Example *.licindia.in or *.onlinelic.in Mandatory Technical Specifications ( Compliance Required Must be for the Features and Benefits Stated ) S.No. Features and benefits Compliance Remarks 1 Contain extensions that allow this certificate to be used for browser-toserver and server-to-server security 2 Contain extensions that allow this certificate to be used for server authentication : -Domain Validation -Organization Validation 3 Can secure web servers with multiple names year validity bit SSL encryption between Web servers and browsers; 6 Trusted by more than 99+ percent of all browsers, most mobile and smart phone applications 7 Unlimited free re-issue guarantee within certificate lifetime 8 Accompanied by round-the-clock online support by chat, web, phone and etc. 24/7 Customer Support 9 Free Certificate Management Services: for automated lifecycle management for inventories of SSL certificates. 10 Free online order tracking and customer account capabilities: renew, revoke, and replace online 11 Ability to secure virtual web servers using the same SSL certificate via the Subject Alternative Name (SubjectAltName) extension 12 Full organization validation CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 15 of 26

16 13 Should support Server Operating System : Web Server on Apache on redhat RHEL AS, Citrix netscaler application switch and Citrix access gateway 14 Signature algorithm - SHA256withRSA with 2048-bit Encryption Key 15 Secure Site Seal 16 Unlimited Server Coverage 17 Free Site Seal included 18 Shows Padlock Icon 19 Time to Issue 5 days 20 Issuer/Certification Authority 21 At least two Public Domain/URL of organizations where proposed SSL certificates have been used for Internet facing commercial business application Internet Banking / ecommerce / Self Service Applications. 22 Contact Details Name and Title of Official Mobile No : Signature of Authorized Signatory: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: Id: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 16 of 26

17 <FORM 10 On letter head of the Bidder> Itemp 10 RCAI Class 2 Document signer Certificate Document Signer Certificate (Supported by UIDAI APIs),Class 2, File Based, Validity : 3 Years, Issued to Organisational Legal Name Life Insurance Corporation of India, Issued by CAs under Root Certifying Authority of India (RCAI) CCA India. Mandatory Technical Specifications Requirements. S.No. Features and benefits Compliance Remarks 1 Document Signer Certificate (Supported by UIDAI APIs),Class 2, File Based, Validity : 3 Years, Issued to Organisational Legal Name Life Insurance Corporation of India Issued by CAs under Root Certifying Authority of India (RCAI) CCA. Without Extended Key Usage : This field should be excluded as required for UIDAI Usage. Compliant with the attached UIDAI Communication on Digital Signatures in UIDAI Authentication & e-kyc APIs for Signing the request XMLs. 2 3 year validity 3 Signing and Encryption With Organisation Name 4 Licensed CAs by Root Certifying Authority (RCAI) of India Name of CA : 6 Contact Details Name and Title of Official CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 17 of 26

18 Mobile No : Signature of Authorized Signatory: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 18 of 26

19 <FORM 11 On letter head of the Bidder> Empanelled e-sign Service Providers - e-sign Services Per Transaction Price (All Inclusive including UIDAI KYC and Integration with LIC Business Applications ) from CCA Empanelled e-sign Service Providers ( Note: One Successful e-sign Transaction to enable digitally signing upto 10 PDF documents with multiple pages, multiple places with one UIDAI Aadhaar authentication) Description of Requirement Requirement Compliance i. UIDAI Aadhaar based Digital Signature at the desired places on the document. ii. iii. iv. Digital Signing of multiple PDF documents with multiple pages at multiple places with one Aadhaar authentication Digital Signature on multiple places on the document. Digital Signature on multiple pages of the document. v. Digitally signing upto 10 PDF documents with multiple pages, at multiple places with one UIDAI Aadhaar authentication vi. APIs, SDK, Sandbox environment available. vii. Coordinate based Signature Display across pages with desired display parameters. viii. Complete document audit trail available. i. Widget/JavaScript/API based integration with LIC Web Based Business Application. ii. ix. Production ready integration with LIC Online web based application within fifteen working days. Vendor to provide the integration api, kit and services at no additional cost. Vendor to facilitate the integration with LIC Business Application at no additional cost to LIC. CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 19 of 26

20 x. Vendor to provide detailed transaction MIS to LIC in the desired format. xi. Vendor will ensure any UIDAI or esign Services related API Modification/Upgradations at no additional cost to LIC. CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 20 of 26

21 <Commercial FORM On letter head of the Bidder> Commercials for Secure Socket Layer Certificate / DSC/ FIPS Certified e-token/e-sign Vendors to Use only the Item relevant and for which the Quote is being provided. Vendors have option to Choose the items for which they wish to provide quotes. Sl Item Base Cost ( In Figures and Words) (Per Unit)/ Per transactions Rs. 1 SSL Certificates with 3 2 Years Validity for Web Sites. GST (mention % and amount) Total Cost(All Inclusive) Rs. Submission for the Quoted Items Form1/ Item1 2 SSL Certificates with Extended Validation (EV) with 2 Years Validity for Web Sites. 3 SSL Certificates Unified Communications Multi Domain ( Pack of 5 Domains) 3 2 Years Validity. Form 2 / Item 2 Form 3 / Item 3 4 Cost of Extra SAN. - 5 RCAI Class 2 DSC ( Signing and Encryption with 2 years Validity with Org Name ) 6 RCAI Class 3 DSC (Signing and Encryption with 2 years Validity with Org Name ) Form 5 / Item 5 Form 6 / Item 6 CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 21 of 26

22 7 RCAI Class 3 SSL Certificate ( Validity 2 years ) for Server to Server 8 FIPS Certified e- Token - USB Token 9 Wildcard Certificate SSL Certificates with 3 2 Years Validity for Web Sites from trusted root CA Example *.licindia.in or *.onlinelic.in 10 Document Signer Certificate (Supported by UIDAI APIs),Class 2, File Based, with Encryption Validity : 3 Years, Issued to Organisational Legal Name Life Insurance Corporation of India, Issued by CAs under Root Certifying Authority of India (RCAI) CCA India. 11 Empanelled e-sign Service Providers - e-sign Services Per Transaction Price (All Inclusive including UIDAI KYC and Integration with LIC Business Applications ) from CCA Empanelled e- Sign Service Providers Form 7 /Item 7 Form 8 /Item 8 Form 9 /Item 9 Form 10/Item10 Form 11/ Item 11 CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 22 of 26

23 ( Note: One Successful e-sign Transaction to enable digitally signing upto 10 PDF documents with multiple pages, multiple places with one UIDAI Aadhaar authentication) We agree to abide by all the terms and conditions of the Empanelment -cum-rate Contract document. We would hold the terms of our bid valid for 2 years as stipulated in the document. We understand you are not bound to accept any Proposal you receive. Authorized Signature: Name and Title of Signatory: Name of Firm: Address: Location: Date: Mobile: CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 23 of 26

24 [On the Letter Head of the Bidder] (Every Bidder must enclose this Form with Proposal ). GENERAL INFORMATION ABOUT THE BIDDER No. Information 1 Company Name Particulars/Response 2. Date of Incorporation / Nature (Pvt./Pub/PSU/Govt.) 3. Registration under Micro and Small Enterprises (MSMEs) ( if available) 4. PAN of the Firm 5. Service Tax Registration No of the Company 6. Company Head Office / Registered Office and Addresses Contact Person(s) Phone Fax Web-site 7. Name, designation and contact details of the person authorized to make commitments to LIC. Key contact person/s for this project along with designation and contact Details (Communication will be addressed to this contact). 8. Any pending or past litigation (within last three years)? If yes, please give details Yes / No / Comments (if option is Yes ) 9. Technical Professional Strength(under permanent employment with the Organization) 10. Whether the Firm/Company has widely accepted certifications. If yes, provide details 11. Profile of personnel with qualification, experience and relevant certification who can be assigned to the activities under this engagement. CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 24 of 26

25 12. Brief Statement: a) About us b) Key technology areas c) Major accomplishments/case Studies (enclose case study documents on relevant technologies) d) Clients d)awards/recognitions 13 Trusted global certifying authority (if applicable ). 14 CCA Licensed CA (if applicable) 15. esign Service Provider 16. Other Relevant Related Information. Note: Kindly attach necessary supporting documents. Bidders Name: Seal: Date: Authorized Signatory CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 25 of 26

26 Terms and conditions: a. DSC/SSL Server Certificate/eSign Services and USB Tokens will be purchased as per business needs during the validity of the quotations/rates. b. No minimum quantities of DSC's are assured to Empanelled Certifying Authority/ Authorised suppliers/esign Service Provider. c. LIC may request for providing the Services/Certificate at any office of the Corporation in India. d. Taxes & Duties: The prices quoted by vendors shall be in Indian Rupees only and will be inclusive of GST and any other Government taxes & levies as at Mumbai. e. Octroi/ Entry Tax, wherever applicable, will be paid as per actuals on production of the original receipt. Taxes are to be shown separately. f. Change in Tax structure at the time of actual invoicing : While any increase in the rates of applicable taxes or impact of new taxes subsequent to the submission of the quotation/rates shall be borne by LIC, any subsequent decrease in the rates of applicable taxes or impact of new taxes shall be passed on to LIC in its favour. This will remain applicable throughout the contract period. g. Delivery time for issuing the DSC/ SSL Server Certificate/USB Tokens : 5 days from the date of issue of purchase order along with all necessary documents. h. No advance payment will be made by LIC. i. TDS will be deducted for any payment made by LIC as per prevailing rules. j. Separate Invoices are to be raised for each of the Purchase Orders placed for CO departments. In case the Purchase Order is meant for more than one department, separate invoice should be raised for each of the department in that particular PO. k. Documents to be produced for release of payment:- i. Invoice (it should contain reference of Purchase Order for execution, description of certificates delivered, quantity, unit price, total amount details) ii. Delivery Challans in original, if any l. No separate Contracts for the above needs to be entered into. The Purchase order itself is the Contract. m. 100% of the payment will be made within 21 days from the date of delivery or installation or submission of complete documentation whichever is later. n. The documentation will be considered as complete if the Vendor has submitted delivery challan and Invoice duly printed on the letter head, duly acknowledged and signed by LIC s officials with name, designation, date and stamp. o. An Acceptance test may be conducted after installation of certificate(s) by the concerned user who will be required to issue sign-off certificate in case of successful implementation. Chief (IT/BPR) CO/IT-BPR/SSL-Cert/ / RC-SSL-DC Page 26 of 26