PKI Certificate Management

KeyTalk makes PKI management simple, efficient and accurate. We do this in different ways:

• CA independent: KeyTalk is independent of Certificate Authorities and linked to a large number of public CAs both GMO GlobalSign and Digicert QuoVadis. Switching between CAs is simple and easy, even when thousands of certificates and end-points are involved. A vendor lock-in is therefore no longer the case.
• Internal CA: KeyTalk contains an internal CA for the generation of private certificates and keys. Did you use previously expensive public certificates for internal purposes? Or did you run into the limited functionality of Microsoft CS and other private CAs? Then, you will like our internal CA: private PKI certificate issuance.
• Automated certificate lifecycle management (CLM): KeyTalk keeps track of the lifecycle of your certificates in a fully automated way. This way, you always have a complete and up to date overview of all your certificates, including the certificate name, SAN and validity. Also, things like used crypto keys and algorithms of internal and external certificates can be included.
• Distribution to almost all (!) servers and end-points: from laptops, tablets and telephones to IoT devices and network equipment. Certificates can be issued to any possible end-point, the only condition is that the end-point makes contact with the KeyTalk server. This is not linked to the network domain, unlike for example Microsoft Certificate Server.
• Key Roll-over: users can use the key associated with a certificate simply and fully automatically on various devices. Think of a laptop, a smartphone and other devices of a specific user. This technique is patented worldwide.
• .. much more. KeyTalk offers the Secure Email Service and the Smart Security Scan – where both the service and the scan are logical additions to KeyTalk’s service and product portfolio.

Technical details

• The KeyTalk platform is modular. The basic server can run as a single operation to manage thousands of certificates. If you manage more than 100,000 certificates, you can easily set up a MySQL Db to expand its capacity to hundreds of millions of certificates.
• High Availability has also been considered: you can deploy multiple KeyTalk basic servers (without additional license fees!) and in combination with the MySQL Db and the Load Balancer, you can easily combine them into one High Availability environment.
• The KeyTalk LDAP Key Server / LDAP S/MIME address book can be added as a free module to the KeyTalk environment. This means that a single KeyTalk LDAP can hold up to 50 million certificates, with a reading rate of up to 22,000 reads per second.
• Using the Smart Security Scan, you can map the network environment in detail, for a clear view of both the port and OS certification levels.