SSH Certifier

SSH Certifier is a high quality software package targeted primarily for OEM vendors that are looking for a scalable, X.509 standards-based Certification Authority solution, to be used as a key component of the total system. SSH Certifier can easily be integrated to other PKI components, thanks to the widely adopted, industry standard interfaces that it provides for interaction.

Public Key Infrastructure (PKI) provides authentication and encryption capabilities to IP networks by utilizing digital certificate technology. Certificates are digital identification documents signed and issued by trusted parties, Certification Authorities (CA). PKI X.509 standards define a structure for a certificate and several operational and management protocols for PKI. These standards have recently been widely adopted in several applications such as IPsec, TLS and S/MIME. This adoption enables interoperable implementation from various vendors which is a necessary requirement for large-scale business applications.

With the PKI system, new users can easily be added by performing the certificate enrollment between the user and CA. Certification Authority issues certificates according to its certification policy, publishes certificate and revocation data to public directories and maintains an internal database. Because of the critical role of the CA in every PKI, the quality of the CA software strongly affects the functionality and security of the whole system.

SSH Certifier is designed to provide open interfaces to 3rd PKI components in order to make the integration as easy as possible. Light-weight Directory Access Protocol (LDAP) client is provided for directory publication, Open Database Connectivity (ODBC) for internal database and several certificate enrollment protocols for client applications.

Customizable Graphical User Interface together with these standards-based protocol implementation and highly scalable architecture enables SSH Certifier to be integrated even to the most demanding PKI environment.

• Automated authentication and identification of network elements in an IPsec Virtual Private Network (VPN)
  
• Issuance and management of certificates for securing email in S/MIME and for authenticating web servers and clients in TLS/SSL
  
• Issuance and management of all X.509 based user certificates in an Internet Service Provider or corporate network environment

SSH Communications Security, Inc., 650 Castro Street, Suite 220, Mountain View, CA 94041. Tel: 650-404-0160; Fax: 650-404-0170.