RSA Digital Certificate Manager
Secure Environment for Digital Certificates

Certificate Manager:

RSA Certificate Manager is a digital certificate management system that enables organizations to develop, deploy, and scale secure applications and online services. Certificate Manager helps to manage digital identities and automate and centralize the management of cryptographic keys and digital certificates.

Certificate Manager offers the following features:

• Enhanced security – Common Criteria evaluation assurance level (EAL) 4+ certification, the highest ranking ever achieved for commercial certificate manager software. Full support of industry-standard certificate revocation lists (CRLs) formats to ensure revoked certificates aren’t deemed valid.
• Scalability – Streamlined user enrollment process that has been independently tested to scale to more than eight million users, supporting massive demand for certificate signing operations, public key infrastructure (PKI) queries, and large-scale certificate storage and management.
• Interoperability – Support for multiple industry standards. Interoperable with more than 200 applications including email applications and directories.
• Ease of deployment and administration – Local and remote web-based administration and a tight integration with Microsoft Outlook to simplify deployment.

Key Recovery Manager:

RSA Key Recovery Manager securely archives and recovers users’ encryption keys to reduce the risk of data loss in the event an encryption key is lost, misplaced, or corrupted. Key Recovery Manager is offered as an optional package as part of RSA Certificate Manager.

Key Recovery Manager features a hardware-based key-generation process handled through a hardware security module, offering a more secure key-generation technique than software-based generation. Hierarchical storage management (HSM) systems provide secure management of private keys in that the keys never leave the module unencrypted. They reside in dedicated hardware while in use and are encrypted with the triple Digital Encryption Standard (DES) when idle.

The use of an integrated HSM enables Key Recovery Manager to deliver the highest standard for security and data integrity while providing key recovery services. Key Recovery Manager also helps organizations to address various storage requirements based on their varying regulatory needs and is completely configurable to meet different storage period requirements.

Since it retains private encryption keys strongly encrypted in secure storage on the hardware security module even compromises to the server’s operating system won’t jeopardize the security of the key database.

Registration Manager:

RSA Registration Manager streamlines the enrollment process for handling large volumes of end user certificate requests by verifying the credentials of certificate requests and providing certificates to the requester.

Registration Manager enables organizations to set up remote or local stand-alone enrollment centers for large user implementations at distributed geographic locations, allowing organizations to scale their certificate management systems while moving the approval process closer to the users. This process significantly reduces the risk of approving certificates to unauthorized parties.

Registration Manager offers the following features:

• Scalability – Support for the distribution of many registration authorities (RAs) to provide easy deployment of certificates to hundreds or thousands of employees, partners, customers, systems, and devices. Scalable across multiple RAs.
• Enhanced security – Highly secure enrollment system that authenticates administrators using certificates and, if required, smart cards. Designed for secure web-based administration and approval via authenticated, access-controlled Secure Sockets Layer (SSL) sessions.
• Flexible enrollment – Streamlined enrollment to support high volumes of requests for certificates. Flexible to work within any trust model.

Validation Manager:

RSA Validation Manager enables immediate validation of digital certificates to ensure the integrity of electronic communications and transactions for organizations and government agencies.

 Validation Manager offers the following features:

• Enhanced security – More efficient and reliable method for checking the status of digital certificates than Certificate Revocation Lists (CRLs). Real-time certificate status checking minimizes the risk of revoked certificates being deemed valid.
• Enterprise certificate validation management – Highly scalable, industry-standards-based validation of digital certificates to meet the needs of today’s demanding online environment.
• Seamless integration – Real-time status checking capabilities for Microsoft and other third-party applications such as email clients, web browsers, and web servers, using Microsoft Common Application Programming (CAPI) interface.
• High reliability, availability, and performance – Support for multiple certificate authorities and millions of users. Accelerated performance with Federal Information Processing standards (FIPS) Level 3-certified Hardware Security Modules (HSMs).

Documentation:

Download the RSA Digital Certificate Data Sheet (PDF).