INSTA CERTIFIER

1
INSTA CERTIFIER

• Basic overview

2
Insta PKI products and services

• Insta Certifier
• A complete public-key infrastructure (PKI)
  platform
• Insta Token Master
• Token personalization software available on
  Windows
• Comprehensive services to complement the
  products
• Support maintenance
• Professional services
• Documentation and training
• Certificates as a service
• BS7799 certified Insta Service Center

3
PKI solutions
4
Insta Certifier in a Nutshell

• Why ?
• To issue digital certificates
• To revoke valid certificates
• To publish certificates CRLs
• What ?
• A complete public-key infrastructure (PKI)
  platform
• Interoperable and flexible
• Standards based implementation
• How ?
• Strong two-factor authentication based on smart
  cards and tokens
• Integrates to heterogeneous network environments
• Centralized authentication management

5
PKI products - Insta Certifier

• Digital certificate issuance
• Certificate revocation
• Certificate and CRL publishing

6
PKI products - Insta Token Master

• Token and smart card personalization

7
Insta Certifier Benefits (1/2)

• Flexible
• Installation on one or several different hosts
• Servers / services can be easily doubled, tripled
  etc. for scalability and security (e.g. for DoS)
  without extra cost
• Easy to customize for customer needs
• Wide multiplatform support
• No separate client applications needed
• Grows from very small to very large installations
• Adapts to existing environment
• Install, configure and just leave it running
• Very strongly focused on satisfying customer
  needs quickly
• The policy configuration features are what makes
  Certifier one of the most flexible and powerful
  PKI products we have seen NSS group test report

8
Insta Certifier Benefits (2/2)

• Extensive support for two factor authentication
• Basically any token/SC through PKCS11 and CSP
• User based enrolment (browser)
• RA based enrolment (Token Master)
• Factory based enrolment (Token Master / CMPClient
  / 3rd party sw)
• Standards-based
• No proprietary interfaces
• No proprietary interpretations of standards
• Enables easy connection to 3rd party sw/hw
• No vendor lock in
• UTF-8 out-of-the-box
• Cost-efficient
• Includes commercial database (no extra cost
  unless using another)
• Includes all the functionality (all
  configurations with only one price)
• Very competitive and simple pricing

9
Applications for Insta Certifier

• PKI is an enabling technique, certificates are
  used for example in
• Web server security (SSL server certificates)
• Digitally signed and encrypted e-mails (S/MIME)
• Strong authentication of remote access VPN users
• Centralized management of gateway keys in
  site-to-site VPNs
• Strong, two-factor authentication for web single
  sign-on (SSO)
• Windows (2000 and XP) domain logon with smart
  cards
• SSH Secure Shell for secure system administration
  and application tunneling
• Smart card logon to wireless LAN using EAP-TLS
• Non-repudiation with digitally signed web forms
• Smart card logon to ERP applications (e.g. SAP)
• and so on...

10
PKI center
11
Standard interfaces 3rd party products are
supported

• Smart card and USB tokens
• Supported via standard interfaces (PKCS11,
  MSCAPI)
• Hardware security module (HSM) for CA key
  security
• nCipher and Eracom officially supported and
  tested
• Other modules supported via PKCS11
• Web access management
• Netegrity Siteminder, IBM Tivoli Access Manager
• IPSec VPN products
• Certifier is OPSEC Certified by Check Point
• Practically any PKI-enabled VPN supported
• Directory server for publishing certificates and
  CRLs
• E.g. Sun One Directory Server, Novell
  e-directory, Oracle iDirectory, OpenLDAP, Active
  Directory, Critical Path

12
Interoperability

• Certifier has been OPSEC certified by Check Point
• Complete interoperability in FW-1/VPN-1
  environment
• Wide interoperability with Ciscos IPSec enabled
  products
• Routers, firewalls, VPN-concentrators, and Cisco
  VPN client
• Tested with Netscreen gateway and other IPSec
  clients
• Enables use of Windows 2000 and XP VPN
  functionality
• Dozens of OEMs use Certifier certificate
  technology in their VPNs

13
Insta DefSec OyP.O. Box 174 (Finlaysoninkuja 21
A)FI-33101 TampereFinlandTel 358 20 771
7111Fax [phone]www.insta.fiwww.certi
ficate.fi