What is MPKI ?

Comtrust Managed PKI solutions allow your business to become a Certification Authority (CA) for your business community without investing heavily in hardware, software, personnel and security infrastructure. As a CA, you will be able to issue various classes of digital certificates to members of your business community. With a managed PKI solution, your organization maintains complete control as to who gets the certificate and whose certificate gets revoked while leveraging the state-of-the-art technology infrastructure deployed by Comtrust.

A managed PKI solution will consist of a Certification Authority (CA), a Registration Authority, a certificates distribution system, PKI enabled applications, security policy and validation service.

Certification Authority: The certification authority provides the trust base for PKI, issues certificates, schedules expiry of certificates, ensures revocation of certificates and publishes these certificates revocation lists.

Registration Authority: The registration authority provides an interface between users and Certification authority. The RA performs critical functions of examining credentials and authorizing issuance of certificates.

Certificate Distribution System: Certificates are published on a Directory Server while revocation list is published on a Validation Server. Users can perform standard search on this directory from their web browser. Comtrust provides directory service as a part of its Managed PKI solution offering.

PKI-Enabled Applications: PKI is a mean to an end, the end being providing the security framework to applications that are deployed to achieve results. These applications may include on-line banking, on-line payments, etc.

Security Policy: A security policy defines the organization’s directions on information security, as well as the processes and principles for use of cryptography. An important part of the security policy is Certification Practice Statement (CPS) containing operational procedures for the Certification Authority.

Validation Service: The applications, which use digital certificates need to check the validity of certificates. Revoked certificates are stored in a directory server as Certificate Revocation List (CRL). The validation authority system facilitates checking of revocation information and makes it available to applications for validation of certificates.

The managed PKI solution best suits a scenario where a reasonably large on-line community needs to be secured. Typical candidates for Managed PKI solutions are trade associations, on-line banking applications, distributor-retailer network, extranets, etc.

For more information on Managed PKI, please contact:
Telephone: +971-4-2222-777
E-mail: productinfo@comtrust.ae

User Certificates | Server Certificates | Business User Certificates

SecureAccess Solution | Managed PKI Solutions |