SSL Certificate Management Platform

Discovery & monitoring

• Inventorying and monitoring of certificates
• Alerting for:
  • –Expiration
  • –Security issue (revocation, weak algorithm, …)
  • –Change (e.g. the certificate is changed on a monitored service)
• Discovery of certificates across the organization infrastructure
  • –Network scan
  • –Certificate Authority scanning
  • –Connector-based scanning (e.g. F5 BIG-IP, Linux Servers, …)

Lifecycle automation

• Automatic certificate issuance and renewal
• Automated deployment of the certificate
• Revocation
• Support for server and user certificates
• Integration with public and private CAs
  • –ACME protocol support as client
  • –Automated ACME challenge validation: http-01, dns-01 and dns-persist-01
  • –API and agent based CA integration (e.g. Microsoft AD CS, EJBCA, …)
  • –Integration with external secret managers for storing credentials (API tokens, password, …)
• Security policies to block non-compliant certificate issuance

Platform

• Advanced notifications (email, JIRA, Microsoft Teams, …)
• Granular RBAC permission system
• Flexible user authentication
  • –Local accounts
  • –Active Directory (LDAP) authentication
  • –SAML federation
  • –OIDC federation
  • –Group mapping
  • –Support for Multi-Factor Authentication (OTP)
  • –Support for Passkeys (WebAuthn)
• Observability
  • –SNMP
  • –Prometheus metrics endpoint
  • –OpenTelemetry
  • –API

ACME Proxy

Adds ACME server support so that SSLCert can validate ACME client requests. Enables easy integration with any ACME client such as cert-manager, certbot, …

• Supported challenge validation
  • –http-01
  • –dns-01
  • –tls-alpn-01
  • –dns-persist-01
• External Account Binding (EAB)
• Unlimited number of directory URLs
• Per directory URL ACL
  • –IP addresses and IP ranges restrictions
  • –Domains list and pattern restrictions

CA Proxy

MDM solutions such as Omnissa provide native Certificate Authority integration to retrieve SMIME certificates and deploy them on managed devices. The CA Proxy enables seamless integration by exposing a specific Certificate Authority API to proxy requests to any Certificate Authorities configured on SSLCert.