Sectigo by TBS INTERNET - SSL certificates broker

Sectigo Certificate Management (SCM)

Context

With the proliferation of systems to secure and, mechanically, the number of certificates to manage, the great diversity of management interfaces sometimes used within the same company or the complexification of internal networks, human management of your fleet of certificates becomes not only costly, but also a source of error.

A platform to ease certificates management

Sectigo, one of the world leaders in the certification market, has anticipated the necessary market developments and put all its expertise into developing a certificate management platform to manage all of your tools (PKI, digital identities, load balancers, email security, etc.) through the same interface.

Product of a long experience and an incomparable expertise, the platform allows not only to automate a large number of technical manipulations but also to discover all the server certificates scattered within the organization.

The SCM platform in details

Sectigo Certificate Manager (SCM) is a universal platform purpose-built to issue and manage the lifecycles of digital certificates to secure every human and machine identity across your enterprise, all from a single interface.

With SCM, you can automate the issuance and management of Sectigo certificates, alongside those from other publicly trusted Certificate Authorities (CAs), and private CAs, including Microsoft ADCS, Google Cloud Platform (GCP), and AWS Cloud Services.

SCM relies on different technologies to offer a large number of deployment options to customers who can easily integrate the platform into their own environment. SCM integrations include:

popular DevOps platforms like Kubernetes, Docker, HashiCorp
leading technology providers including AWS, Google, F5, A10 Networks and Kemp
popular CDNs like Akamai
notification apps like Microsoft Teams and Slack

Advantages of the plateform

automated discovery of the certificates scattered arount the organization
use of different protocols (ACME, SCEP, API) allowing the automation of different operations (key generation, DCV validation, etc.)
- ACME: Nginx, Apache, Plesk, HAProxy
- SCEP: MDM, routers, secure email gateway
- EST: routers, switches
- Microsoft agents: Windows 12, Windows server
- Network agents: Apache, Tomcat, F5, Microsof IIS
limitation of the risk of human error (forgetting, partial installation, etc.) or security failure
cost reduction through the automation of a large number of manipulations
multi-brand management: the platform is independent of certification authorities
a clear dashboard showing you your fleet of certificates, their validity, type of encryption...

PKI management

SCM offers several options:

drive your existing PKIs (internal and/or external) such as Microsoft ADCS, Google Cloud Platform (GCP) and AWS Cloud Services
the implementation of a Sectigo PKI managed by SCM

The certificates taken into account

SCM manages a large number of certificates, from all authorities and for all kinds of needs:

server certificates (OV and EV) to secure your web services, networks and load balancers
code signing certificates to sign and timestamp your applications and software
S/MIME client certificates to sign and encrypt your emails
client ID certificates to strongly authenticate people within an organization. The implementation of this type of certificate replaces the management of passwords and authentication methods using employees' personal mobile tools

Fonctionnality

SCM offers several functions :


INTEGRATION ET AUTOMATION
Public PKI	Venafi
Private PKI	ServiceNow
Automated discovery of certificates	appviewX
Accès API	keyfactor
Agent réseau	MS Azure Key Vault
ACME
SCEP
MS agent