KeyTalk Certificate Key Management System (CKMS)

PKI and Certificate Lifecycle Management (CLM) don’t have the best reputation. Implementation, management, and distribution of certificates are known to be complex, cumbersome, and labor-intensive.

That’s unfortunate because it doesn’t have to be that way. The patented KeyTalk technology makes PKI management exceptionally simple, efficient, and accurate.

CA-independent management and distribution

KeyTalk is CA-independent and connected to a large number of public CAs, such as GMO GlobalSign and Digicert QuoVadis. There’s no question of vendor lock-in anymore: switching between CAs is straightforward and can be arranged in no time, even when it comes to thousands of certificates and end-points.

In addition, KeyTalk contains an internal CA for generating private certificates (and keys). These can also be short-lived (temporary). The purchase of unnecessarily expensive public certificates for internal use is therefore a thing of the past.

Certificate Lifecycle Management System

For most organizations, Certificate Lifecycle Management is a hassle. We still often encounter departments where the validity periods of certificates are tracked in Outlook calendars or an Excel file. That’s not only cumbersome but also prone to error.

KeyTalk fully automates the lifecycle management of your certificates. This way, you always have an up-to-date detailed overview including the certificate name, SAN, and validity, but also the cryptographic keys and algorithms used for all your internal and external certificates. Also, renewing or deploying new certificates and switching to another CA is easily arranged.

Flexible distribution to all possible servers and end-points

You can use KeyTalk for the distribution and management of large numbers of SSL, personal, machine, and S/MIME certificates and (optionally) key pairs. For servers, laptops, mobile phones, Internet of Things devices – you name it. We do this on nearly every OS and multi-domain.

“KeyTalk can be used for distribution to almost all possible servers and end-points: from laptops, tablets, and phones to IoT devices and network equipment.”

We facilitate this through our own apps for deployment, integration with MDM solutions (such as MobileIron) and HSMs (such as Luna), support for various directory services (AD), authentication protocols (such as Kerberos), and custom scripts and/or REST APIs for distribution to user devices, servers, and IoT devices.