SecurePKI

Public Key Infrastructure Security Solution

SecurePKI is an integration PKI solution of several crucial software modules and hardware devices which includes Certificate Authority (CA), Registration Authority (RA), Validation Authority (VA), Hardware Security Module (HSM), PKI Devices, PKI Device Management System and Professional Services.

SecureCA

SecureCA is an enterprise class PKI Certificate Authority built on J2EE technology. It is a well tested, robust, high performance, platform independent, flexible and modular based CA system that can be used as a stand-alone or integrates with other J2EE applications. SecureCA is developed based on EJBCA framework, followed with extensive localization and enhancement to make it as part of the integrated SecurePKI solution. On top of that, it can be further customized to meet different CA’s operating procedures and workflows.

In brief, SecureCA consist of a Core engine which run/ operates/ executes core CA tasks. It also consists of a simplified version of RA to allow CA system administration, configurations and settings. Besides, it has a built-in publisher to publish the latest certificates and certificate status to Online Certificate Status Protocol (OCSP) or LDAP. OCSP is a VA module which is accessible for public users to check the validity of a certificate issued by respective CA.

SecureTMS RA

SecureTMS RA is a web based RA System integrated with PKI Device Management functionalities. It facilitates a single system for both PKI Devices and Digital Certificates lifecycle management. SecureTMS RA is located at the front-end which allows CA System to resided securely at the deepest security network layer. This means there is neither direct access nor interaction with the CA System by RA administrator and/or any application.Every transaction must access through SecureTMS RA to ensure strong security integrity.

SecureTMS RA consists of Administrative and Self-Service modules. Administrative module is accessible by RA/Admin user for administrative operations i.e. manage user, enrol certificate, renew certificate, assign group and permission, manage token distribution, manage approval, view log and many more. Whereas, Self-Service module is accessible by all domain users (including RA/Admin User) for self service facilities such as self certificate enrolment and renewal, token lost reporting, token unblock, change token PIN and etc.

SecureClient RA

SecureClient RA is a distributed RA resides at the CA’s that client data center. It will establish secure remote connection to RA Center within the SecureTMS RA in the CA data center. This system will enable the CA’s client to perform RA functionalities through the PKI management concept. Now, the CA’s client can take charge of their own end user certificate enrolment process without disclosing their end user credentials to the CA. This is a common requirement by most of the financial institutions with very strict user information control.

RA Center tht resides in CA data center is the centre point that handles the connections with one or more SecureClient RA. Connection between RA Center and SecureClient RA is secured via SSL connection to ensure secure data transmission.

SecureClient RA enables web manager to allow RA Administrator to carry out administrative functions such as user management, token management, certificate enrollment, certificate renewal, reporting, etc. It also offers APIs to simplify 3rd party application integration, for example to include user enrollment in the bank online portal. For optimal security implementation, SecureClient RA can be integrated with HSM to secure the SecureClient RA keys that are used for signing, encryption and decryption between SecureClient RA and RA Center.

SecureAuto RA

SecureAuto RA is an add-on module in SecureClient RA to fulfill customer requirement to have an automated user data validation. This module replaces the manual validation through an automated workflow according to CA’s client validation policies. SecureAuto RA is designed with ready connectors to ease expected extensive integration with CA’s client databases and/or directories. SecureAuto RA can also integrates with HSM for transaction signing purpose.