public key infrastructure ...go.thalesesecurity.com/rs/480-lwa-970/images/thalese...public key...
TRANSCRIPT
w w w . t h a l e s e s e c u r i t y . c o m
ENSURE YOUR PKI MEETS ALL YOUR BUSINESS NEEDSExpanded functionality from your existing PKIWide variety of options to meet your business needs presented to you by consultants with years of PKI experienceHigh confidence in your PKI solution afforded by thorough planning, documentation and testingEnhanced security through Thales Hardware Security Modules (HSMs) proven over thousands of units deployed globally
<Thales e-Security>
PUBLIC KEY INFRASTRUCTURE DOCUMENT & DEPLOY SERVICE
Follow us on:
<Thales e-Security>
Americas – Thales e-Security Inc. 900 South Pine Island Road, Suite 710, Plantation, FL 33324 USA • Tel:+1 888 744 4976 or +1 954 888 6200 • Fax:+1 954 888 6211 • E-mail: [email protected] Pacific – Thales Transport & Security (HK) Lt, Unit 4101-3, 41/F, Sunlight Tower, 248 Queen’s Road East, Wanchai, Hong Kong • Tel:+852 2815 8633 • Fax:+852 2815 8141 • E-mail: [email protected], Middle East, Africa – Meadow View House, Long Crendon, Aylesbury, Buckinghamshire HP18 9EQ • Tel:+44 (0)1844 201800 • Fax:+44 (0)1844 208550 • E-mail: [email protected]
Many businesses rely on digital certificates used as security tokens for a wide variety of purposes such as authentication, digital signing and encryption. While a multitude of services and applications can use these certificates, often a Certificate Authority will be deployed into a business to satisfy a single need without forethought as to how else it can be used.
Thales e-Security Advanced Solutions Group (ASG) can help your business reconsider its approach to certificates and PKIs, leveraging additional flexibility from what is now considered a core service to support multiple use cases and applications.
KEY SERVICESA Thales e-Security ASG consultant will perform the following functions as a part of the PKI Document & Deploy Service:
Analyze your PKI requirements Design and document a solution based on Windows Server 2012 R2 Microsoft Active Directory Certificate Services (MS ADCS) and Thales Hardware Security Modules (HSMs) Provide “hands on” or “hands off” assistance with deployment, including detailed installation guides Test the solution to prove its functionality
HOW THE DOCUMENT & DEPLOY SERVICE WORKSYour consultant will initially discuss your requirements with you. A requirements gathering workshop will be held if desired to collect all key stakeholder input.
The consultant will then document the requirements, proposed solution, and post-deployment tests, and agree with you on the scope of work and price before commencing further work.
The solution will be designed based on MS ADCS and utilising Thales HSMs for private key protection. After solution design, the ASG consultant will produce documentation to cover installing the solution and its configuration. The documentation will also contain operating steps as well as information relating to backup and recovery. Your consultant will present a thorough plan designed to minimize downtime during deployment.
Once the installation guide is completed, your ASG consultant will help you deploy the solution. The consultant will either lead the deployment or guide your staff to deploy the solution. Thales ASG encourages working with the staff who will support the PKI to facilitate direct knowledge transfer.
Finally, your ASG consultant will work with your team to test the PKI to prove that the solution meets objectives and functions as designed.
A VARIETY OF OPTIONS & SIZESThe Thales eSecurity PKI Document & Deploy Service comes in a variety of sizes to suit many purposes. For example, the ASG can provide solutions for:
Single-tier PKIs for test purposes Two-tier PKIs for enterprise uses including various certificate enrolment services High availability PKIs PKIs generating credentials for services you provide to your customers High assurance PKIs documented with full policy frameworks where third party accreditation is a requirement
LEARN MOREVisit us at www.thalesesecurity.com to learn how our advanced data security solutions and services deliver trust wherever information is created, shared or stored.
For more information about Thales e-Security PKI Services, please visit www.thalesesecurity.com/services/pki-professional-services
PUBLIC KEY INFRASTRUCTURE DOCUMENT & DEPLOY SERVICE
© T
hale
s - Ju
ne 2
017•
PLB6
740
nShieldEdge
OfflineRoot CA
Private signingkey protected
by HSM
Private signingkey protected
by HSM
Private signingkey protected by HSM
nShieldConnect
Issuing CA 1 Issuing CA 2
End User Devices
Certificate
nShieldConnect
End User Devices
Certificate