product

CEMA - Fully-featured Certificate Lifecycle Manager

Eliminate manual errors and ensure continuous security compliance with a powerful and modern certificate manager.

key benefits

Simplify and automate the certificate management with CEMA.

The CEMA Certificate Manager is a modern, fully-featured, certificate lifecyle manager developed by intelliCard Solutions AG (Id-security).

Acting as a unified PKI front-end, CEMA connects to various CAs, letting you use a single interface for all you PKI needs. CEMA is also back-end to the ID-Security(/intelliCard) Enrollment Hub supporting many enrolment protocols, independently of the protocols the issuing CA supports.

All certificates are stored securely in a centralized repository, providing easy access for administrators and facilitating efficient management. By implementing granular access controls to manage permissions for certificate management tasks, you ensure that only authorized personnel can perform critical actions on certificates. Define customizable policies for certificate renewal based on expiration dates, usage patterns, and compliance requirements. Automated issuance and renewal ensures uninterrupted service availability suitable for large scale industrial IoT.

‍

Unified PKI front-end

A unified front-end to internal and public certificate authorities simplifies administration and reduces manual error by standardizing certificate management procedures in the organization.

Flexible enrollment options

Enroll via web interface or REST API. Supports ACME, SCEP, Intune and Microsoft AutoEnrollment protocols via Enrollment Hub.

Actionable Data

Search Configurations gives you comprehensive view of certificate usage at the click of a button. With any number of saved personal or shared Search Configurations, you always have access to data to guide PKI decisions.

Enterprise-grade security

CEMA is written in Java and uses robust, hardened deployments and user authentication. And of course, it integrates with Hardware Security Modules (HSM) for key storage

GET STARTED

Great companies trust ID Security

Made for Enterprise PKIs

CEMA is built to suit the needs of enterprise PKIs. Connect to publicly trusted CAs as well as internal CAs, such as EJBCA, Microsoft Active Directory Certificate Services (ADCS) and other PKIs. Automate large-scale enrollment using REST API and get extensive enrollment protocol support via Certificate Hub.

Flexible User Management

Assign user groups to one or more roles which defines user privileges. Supports Kerberos (Active Directory), OpenID Connect and certificate-based single sign-on and group management.Enable optional multi-factor authentication (MFA) for high-privileged users.

Smart Dashboard

The fully-configurable CEMA Dashboard puts essential data front and center. Never miss a certificate about to expire or let abnormal issuance go unnoticed.In the dashboard, every CEMA administrator have the critical information they need always at their fingertips.

Workflows for manual procedures

Eliminate errors in manual procedures with workflows tailored to any user level. The powerful Workflow system allows different user groups to interact with different options available for certificate issuance and publishing.Simple one-click certificate issuance with fixed values or flexible workflows that allows selecting certificate type and issuer can be made available to the users who need it, and only them.

Download Server

The CEMA Download Server makes distributing key stores and certificate easy. Automatically send download links to certificate holders. Enforce strong password policies with password generation.

Deploy anywhere

CEMA runs in a hardened Apache Tomcat web server and can easily be deployed on-premises on Windows and Linux, in the cloud or as container. MariaDB, MySQL and Microsoft SQL Server database support.

GET INSTANT ACCESS

features

Packed with useful features

ACCESS YOUR FREE TRIAL

Tools for Best Practice PKI

Running a best practice PKI requires constant awareness of what certificates, key and algorithms are in use throughout an organization. A modern certificate lifecycle manager should ensure that nothing important goes unnoticed.

Become Crypto Agile

Achieve crypto agility by tracking which cryptographic keys and algorithms that are in use.

Combined PKI Inventory

Inventory all issued certificates, devices and certificate owners from all CAs used in your PKI.

Up-to-date statistics

Create detailed statistics and reports of your PKI usage with CEMA Search Configurations. Visualize critical information in the Dashboard.

Get notified of important events

Notify PKI administrators of important alerts and send e-mail notifications to certificate holders when it is time for them to renew. Escalate with notifications to department manager if critical certificates are not renewed in time.

Automation and Integration

Automation is key to reduce security risks associated with manual errors. Prevent certificate-related outages and breaches by automating lifecycle management.

Unified front-end to internal and public certificate authorities

Enforce standard procedures with a certificate lifecycle manager that is able to connect to the various internal and external CAs in use. CEMA connectors supports Microsoft AD CS, EJBCA, GlobalSign, AtlasCMP, BlueX. Clients enrolling through CEMA can use the following protocols, independently of issuing CA capabilities: Microsoft AutoEnrollment, ACME, SCEP, Intune.

Automate certificate issuance and renewal with REST API

Deliver certificates quickly and securely to any point in your DevOps pipeline. Handle bulk operations with simple REST calls.With CEMA, full configuration management via REST is possible.

CipherMail integration

CEMA integrated with the CipherMail solution for e-mail encryption and signing, ensuring keys and certificates conform with security policies.

Enterprise-grade Security

CEMA is designed with security in mind and provides many useful functionality for ensuring compliance with though security standards. Enforce security policies consistently and reduce security risks by ensuring all certificates comply with your organization's security policy.

Hardware Security Module (HSM) Support

Cryptographic keys used by CEMA can be stored in any HSM with PKCS#11 support.This guarantees best-practice control of keys used for audit log signing, TLS connections and database credential encryption.

Role-based Access Control

CEMA users can only access resources allowed by their assigned role. User roles can be managed in CEMA or taken from outside source such as Active Directory group or client TLS certificate data.

Multi-factor Authentication

Multi-factor authentication (MFA) can be enforced for high-privileged users.

Multi-tenancy

Multi-tenancy support with logical separation of different PKI environments.

“Due to Watson's flexibility and openness, VAIOT can use it in almost every aspect of our project, from contract generation to the development of intelligent distribution channels.”

Amanda Pisani

Chief Security Operations, Moloco

get in touch

Want to know more about our way of working?

We are delighted to hear more about your situation and offer the best possible solution after consulting with our experts.