CertM

CertM Certificate Lifecycle Management System logo with a person using a laptop and digital document icons in the background.
A person types on a laptop with digital icons of certificates; text reads "CertM Certificate Lifecycle Management System.

сertificate Lifecycle Management System

  • Digital scanning via Agent-based scanning for domains and end-points.
  • Automation. Network and CA Scanning – Automatic and Comprehensive scanning for discovery of all digital certificates in the enterprise network (SSL/TLS, SSH, Mobile, WiFi & VPN).
  • Monitoring and Status Management.  Certificate expiration alerts and automatic renewal of digital certificates.
  • Accessible Display. Centralized display of all enterprise digital certificates via a single screen, including advanced searching, filtering, and sorting capabilities.
  • Control and Management. Central management of all enterprise digital certificates lifecycle via a user-friendly web-based interface which enables: issuance, renewal, suspension, revocation, and more.
  • Reporting. Display of certificates filtered by CA, up-to-date statistical data by visual graphs, and detailed reports of all enterprise digital certificates including their health status, periodical overview, and more.

CertM performs an automatic scanning process and updates the validity of all certificates through a centralized PKI management system:

  • Controls the quantity of certificates present in all organizational systems
  • Reduces reliance on manual error-prone processes, and service/system shutdowns
  • Locates existing certificates and their status
Red icon showing a dollar sign in a circle between two gears, connected by two curved arrows forming a cycle.

Reduced costs and operating times

Two red gears inside a rectangular loop formed by four red arrows, representing a process or system in motion.

Significant failure point neutralization through automatic certificate renewal

Red icon of a process flow with a gear symbol at the top, a checkmark at the bottom, and connected by a curved path with three intermediate nodes.

Prevents human errors

A red, stylized icon showing two rounded rectangles stacked with a horizontal line dividing them across the center, on a white background.

Continual system scans

Reach out to our sales team

Download a product brochure

CERTM – System Advantages:

  • Reduced costs and operating times
  • Prevents human errors
  • Central management
  • Automatic certificate renewal (neutralizing a significant failure point)
  • Prevents service shutdowns (enhancing service accessibility)
  • Continual system scans
  • Centralized aggregation of all digital certificates’ data
Infographic showing CertM system advantages, including reduced costs, error prevention, centralized data, system scans, service stability, certificate renewal, and centralized management.
Diagram showing CertM Certificate Lifecycle Management System connecting to Public CA, Enterprise Systems, Active Directory, SIEM/SOC, HSM, and Private CA, with a dashboard screenshot at the top.

System Characteristics:

  • Uses digital/automatic processes instead of error-prone manual processes.
  • Ability to detect and view existing certificates and their status
  • Centralized system for managing PKI infrastructures
  • Automation throughout certificate lifecycles
  • Automatic certificate renewal
  • Integration with HSM components
  • Certificate expiration alerts
  • Integration with the organizational CA
  • Integration with international CA providers
 

Automation throughout certificate lifecycle

CA and Network Scanning

  • Network and CA scanning to detect all network digital certificates
  • (SSL/TLS, SSH, Mobile, Kubernetes, WiFi & VPN)
  • Direct scanning via an Enrollment Agent
  • Integrating with Private/Public CAs
  • API for interfacing with third-party systems
  • Integrating with AD
 

Automation

  • Automatic digital certificate renewal
  • Certificate expiration alerts
  • Automated action configuration via API
 

Display

  • All the organization’s digital certificates centralized on a single screen
  • Comprehensive display of all existing digital certificates on the network
  • Comprehensive display of all existing digital certificates on all CAs
  • Current status of every digital certificate throughout its lifecycle
 

Management and Monitoring

  • Digital certificate lifecycle management
  • Search/filter/sort based on required criteria
  • Revocation/suspension of digital certificates
  • Manual/automated management
 

Reporting

  • Digital certificate filtering by CA
  • Filtering based on protocols/ports/devices and more
  • Reports and statistics
  • Alerts and warnings
 

Functionality:

CA and Network Scanning

  • Network scanning and status display of all existing digital certificates (including IIS, Apache, F5, Imperva, GigaMon)
  • Verification of certificates installed on system-linked CAs
  • Automatic search for certificates installed on the organizational network
  • Direct scanning via an Enrollment Agent
  • Certificates catalogued by the components in which they are embedded: protocols, IP addresses, ports, URLs, and more.
 

Monitoring and Alerts

  • Reports and statistics
  • Filtering and screening to generate reports based on required criteria
  • Certificate expiration alerts and warnings, to facilitate timely action
  • Logs collected by monitoring systems through SNMP/SYSLOG
 

HSM Component Integration

  • Secure key storage in a dedicated physical device (HSM) with partitioning capability
  • Key storage for various purposes: SSL, Code Signing, Client Authentication, Docker Container
  • ComSign KSP service on servers/endpoints for communication with the central KSP Server
  • Uses Reference for central HSM
  • Automatic creation of a KDC authentication certificate (for LOGON) from the central HSM using ADCS
 

Central Management

  • Easy-to-use and Intuitive Control Screen (WEB) for management
  • Issues various digital certificates such as SSL, Authentication, etc.
  • Digital certificate creation, configuration, signing, and issuance
  • Display of all network certificates, with advanced filtering options
  • Automatic certificate renewal close to expiration date (configurable)
  • Alerts to system manager (via email/SMS) regarding expiring certificates
  • Revocation/suspension of digital certificates
  • Certificate display/download
  • Full resilience
 

Interfaces:

  • System is On-Prem/SaaS
  • Integrates with several CAs
  • Integrates with organizational CA services (supports MSCA/EJBCA)
  • Integrates with external CA services (DigiCert)
  • Integrates with HSM components (given CSP)
  • Integrates with AD
  • Integrates with data security and monitoring systems
  • Integrates with third-party systems
  • Integrates with external DB
  • REST/SOAP API

Our customers:

Green and white Tel-Hai College logo with a stylized roof shape on the left and the words "Tel-Hai College" on the right.
Logo for the Tel Aviv Museum of Art, featuring Hebrew and English text alongside a geometric black abstract shape.
The Hertz logo with black text on a yellow rectangular background, centered on a white backdrop.
The Matrix logo features the word "matrix" in purple lowercase letters with a cluster of blue 3D spheres arranged diagonally to the right.
Issta logo featuring the company name in black and gray Latin letters on the left and green Hebrew letters on the right, on a split white and green background.
The PwC logo featuring bold black "pwc" letters and overlapping orange, red, and pink gradient rectangles on the right side.
Logo of The Jewish Agency for Israel, featuring a blue Star of David, stylized hands, and text in both Hebrew and English.
Israel Airports Authority logo featuring blue and orange abstract shapes and Hebrew and English text stating "Israel Airports Authority.
The image shows the TOLLMAN's logo with the brand name in black capital letters on a white background. The letter "A" is stylized with a diagonal line.
The image shows the letters "H", "O", and "T" in black, with the "O" replaced by a square gradient transitioning from red to pink.

Reach out to our sales team

Skip to content