R1553 (31-Jan-2025)

This release introduces new features as below:

What's New

• Consent Management System: Consent Management System (CMS) will be implemented to manage user consent and compliance requirements. The system will collect, store, and track user consent for certificate issuance, data processing, and certificate renewals. To meet regulatory requirements and other privacy laws. Provides users with the ability to review, modify, or withdraw consent, ensuring transparent management of personal data.

• Akamai Discovery and Deployment (CPS + Origin Server): Discovery and Deployment for Akamai will include the setup for the Certificate Provisioning System (CPS) and Origin Servers across different environments.

  • CPS Discovery: The system will automatically discover Akamai's CPS for seamless integration with CERTInext.

  • Akamai Origin Server Discovery: Identify and track origin servers that handle content delivery in Akamai's CDN, ensuring proper certificate application.

• AWS ECM (Enterprise Certificate Management) will be integrated into CERTInext, enabling discovery and deployment of certificates within Amazon Web Services (AWS). Identify and track certificates issued and used within the AWS environment.

• Discovery and Deployment via Connector Bot: Connector Bot will automate the discovery and deployment of certificates and keys across different environments and pushes it to the Requestor.

  • Discovery: Automatically scans the network and identifies all certificate stores, keystores, and other endpoints that require certificates.

  • Deployment: Automatically deploy certificates to target systems, ensuring consistent and up-to-date certificate management.

• CA Discovery: CA (Certificate Authority) Discovery will allow CERTInext to automatically discover all active certificate authorities (CAs) within the organization. This ensures all issued certificates, whether internal or from third-party providers, are tracked and managed within CERTInext.

• JKS (Java KeyStore) Discovery: Identify and manage certificates stored in JKS. JKS Management facilitates discovery of keystore files for certificate renewal, replacement, and revocation.

• Protocol Support (SCEP / EST / CMP): Protocol Support will include SCEP (Simple Certificate Enrollment Protocol), EST (Enrollment over Secure Transport), and CMP (Certificate Management Protocol) to manage certificate issuance and lifecycle across various endpoints:

  • SCEP: Commonly used in environments like mobile devices and network devices for automated certificate enrollment.

  • EST: A more secure version of SCEP, used to ensure encrypted communication between devices and CAs.

  • CMP: Used in highly secure environments for complex certificate management workflows.

• File System Discovery – Key Store File (Certificates & Keys): File System Discovery will help CERTInext scan the file system for keystore files, which may contain private keys and certificates. Files such as PKCS12 (.pkcs12) or Java KeyStores (.jks) will be identified, enabling the import, management, and tracking of certificates stored outside centralized systems. This is critical for environments where certificates and keys are stored locally or in custom key storage solutions.

• CERTInext – New Partner & Sub-Partner Flow and Commission Model

  • Partner Onboarding: A simplified and structured process for adding new partners and sub-partners to the CERTInext platform.

  • Roles & Permissions: Partners and sub-partners will have distinct roles and permissions to manage certificates and associated processes.

  • Commission Model:

    • Tiered Commission Structure: Partners can earn commissions based on the discount percentage given to the Sub-partners.

    • Automation: The commission process is automated to avoid manual calculations, providing a transparent and real-time overview of earnings.

• Vulnerability Ratings in Discovered Certificates Excel: When exporting certificate discovery data (e.g., to Excel), CERTInext will include vulnerability ratings for each discovered certificate. This feature will help identify certificates with known vulnerabilities or security risks.

• Monthly Invoicing: CERTInext will support monthly generation of invoices for certificate services, tracking usage, and subscription charges over the course of the month. This will make the invoicing process more efficient and aligned with monthly billing cycles. This feature is based on permission provided in emSign backoffice.