Private PKI-as-a-Service

WHY: Private PKI is typically used to provide strong authentication and encryption for internal use cases. Enterprises rely on thier public key infrastructure (PKI) Rather than Private PKI for identity, security and trust for the vast ecosystem of machines, users, devices and applications in their environment. 

CHALLENGE: Implementing an on-prem private PKI is very complex, time-consuming, expensive and rigid. It requires upfront investment in expensive hardware, dedicated PKI expertise and significant time and effort for ongoing operations and maintenance.

There are also additional requirements and hidden costs that are often overlooked including:

• Hardware and software procurement and maintenance.
• Secure facilities including backup and disaster recovery.
• Compliance audits.
• Certificate lifecycle management.
• Highly available validation services including OCSP infrastructure.
• Internal PKI expertise/ consultants for designing the PKI.
• Scalability to support growth and modern use cases.
• Creation of a CP/CPS and auditing of policies/procedures

SOLUTION: Setting up a secure, scalable and compliant cloud-based PKI is easier and faster than ever with AppViewX PKI+. Whether needing to comply with data protection mandates, enable ecosystem trust, or secure assets with strong authentication and encryption, PKI+ is a turnkey PKI-as-a-Service for all private trust use cases. PKI+ combined with AppViewX CERT+ provides a centralized solution for modern private PKI and end-to-end certificate lifecycle management automation for both public and private certificates.

Instant Provisioning

•  Enterprise-grade private Certificate Authority (CA) provisioned in minutes via virtual key ceremony.
• Support for multi-cloud enrollment and management. CAs provisioned in regions of choice. Configurable certificate templates.
• Seamlessly migrate and replace existing in-house PKI to AppViewX PKI+.
• Support for native Windows Auto-enrollment and silent provisioning of certificates without an additional client footprint.

Robust and Secure CA Environment

• Highly secure FIPS 140-2 Level 3 HSMs to ensure safety
  of CA Keys.
• X.509 CRL and real-time OCSP certificate validation.
• Strict access and security policies with multi-factor authentication to access all CAs.
• Supports the M of N concept for all CA key operations.
• Template-based CP (Certificate Policy) and CPS (Certificate Practice Statement) for audits and
  compliance.

Simplified PKI Management & Operations with Fully Integrated CLM

• Single-pane-of-glass view for easy certificate discovery and complete visibility.
• Centralized certificate management and automation.
• Support across multi-cloud environments, network devices, DevOps, containers, etc.
• Support for multi-issuer, both private and public CAs.

Highly Available and Scalable Infrastructure

• Ease of issuing millions of certificates.
• Ability to auto scale as needed.
• CA load sharing for high availability

Extensive Native Integrations

• Seamless API-based integration with multiple CAs, Active Directory Windows Auto enrollment, cloud services, DevOps toolchains, ITSM, SIEM, and MDMs.
• Auto-enrollment protocol support – EST, SCEP, ACME and NDES.

Self-service PKI

• Self-service portal for cross-functional teams.
• Role-based access control for creating and managing PKI and CAs.
• Self-service forms exposing teams to relevant-only information .
• Alerts for imminent certificate expirations sent to individual users or groups at periodic intervals.
• Easy transfer of certificate ownership to new users (in the event of employee turnover or role changes).