Transcription
PKI AutomationDistributing and managing certificatesfrom any CA for all your devices
Certificates – for what?What applications use PKIcredentials in 1x*Ponemon Research 2016PKI Automation2
Certificates – from where?Public CASSL/TLSS/MIMEVPN802.1xPrivate CAPKI Automation3
CA Options Microsoft CA (AD CS) Integrated component of Windows Server Autoenrollment Pupular & simple PKI Products Proprietary, expensive Open Source Control over the code No AD integration, no autoenrollment Managed PKI Service for a calculable price Trust in CA Provider required AD integration & autoenrollment neededPKI Automation4
Distribute & manage certificatesTOPKIPrivate CAPublic CAPKI Automation5
TOPKI componentsAutoenrollment fromnon-Microsoft CAMobile S/MIMEEnrollmentTOPKICertificate LifecycleManagementS/MIME CertificatePublishing & RetrievalPKI Automation6
Windows Autoenrollment Requirement: Use a non-Microsoft CA for aWindows domain, e.g. Internal OpenSource CA for device certificates Public CA for trusted S/MIME certificates Solution: Certificate Enrollment Proxy Acts like a Windows Enterprise CA Seamless Active Directory integration Autoenrollment Autorevocation Key Archival & RecoveryPKI Automation7
Enrollment ADWebEnrollmentHTTPMSDeviceEnrollmentPKI AutomationMobileEnrollment8
Mobile S/MIME ctedNetwork.P12UnmanagedDeviceKey ArchiveMailPrivate KeyPKI Automation9
End-to-end encryption?UserPartnerInternetPKI Automation10
Incoming e2e encryption1. Publish2. RetrieveADPartnerUser3. EncryptPKI Automation11
Outgoing e2e encryption1. Request2. RetrievePartnerUser3. EncryptPKI Automation12
Mobile e2e ctiveSync ProxyActiveDirectoryPKI Automation13
Certificate Lifecycle ManagementWeb App for: Role based certificatelifecycle management Certificate operations Meta data User & administrator self-servicesServices for: Reporting/Statistics Notifications Central key-pair generationPKI Automation14
Certificate databaseWeb-GUITOPKIDatabaseCertificatesPrivate KeysMeta Data08170815 0816PKI Automation15
Manage certificates with browserPKI Automation16
PKI automation with TOPKITOPKIPrivate CAPublic CAPKI Automation17
Thank you for your attention!PKI Automation18
Key Archival & Recovery PKI Automation 7. Enrollment scenarios PKI Automation 8 Web Enroll - ment Device-AD DCOM/RPC HTTP AD MS CA Mobile Enroll-ment Certificate Database. . Certificate database PKI Automation 15 Web-GUI Certificates Private Keys Meta Data 0816 0817 0815 TOPKI Database. Manage certificates with browser PKI Automation 16.
