Keyfactor + Fortanix DSM
As organizations move to the cloud, the use of public key infrastructure (PKI) and certificates to securely authenticate machines and workloads has grown dramatically. To keep pace, security teams need a way to effectively manage all of these machine identities across their hybrid and multi-cloud infrastructure, all while ensuring that sensitive private keys remain protected.
Solution Overview
Keyfactor and Fortanix combine the benefits of certificate lifecycle automation with robust key protection in Fortanix Data Security Manager (DSM). Keyfactor provides full discovery, policy enforcement, and automation for the lifecycle of certificates, and Fortanix DSM ensures secure generation and storage of private keys associated with those certificates. The combined solution gives teams the flexibility to manage millions of keys and certificates, whether in the cloud, on-premise or embedded in IoT devices.
Gain Visibility and Control
Manage and enforce policy for every certificate issued from your public, private, and cloud-based CAs — all from a single intuitive interface.
Simplify Operations
Fully automate certificate renewal and provisioning across all devices and workloads in hybrid and multi-cloud environments.
Protect Private Keys
Generate, store, and manage hundreds of millions of private keys using the FIPS 140-2 Level 3 certified Fortanix HSM on-prem or in the cloud.
How it Works
Keyfactor Command integrates directly with any public, private, and cloud-based CA to support self-service enrollment and automated provisioning of certificates to workloads. The platform can leverage Fortanix DSM to protect the private key associated with certificates and ensure that crypto-operations are completely secured by Intel SGX.
Key Features
Visibility and Control
Centralized console for discovery, management, and self-service enrollment for certificates in multi-vendor environments.
Lifecycle Automation
Powerful and highly flexible Orchestrators provide discovery and automation for servers, load balancers, cloud workloads, and more
Private Key Protection
Only authorized users can access keys protected with multiple layers of defense, including Fortanix Runtime Encryption and Intel SGX.
DevOps-Ready
Extensible RESTful APIs and plugins make it easy for developers to integrate security into applications.
Distributed Architecture
Highly scalable, distributed architecture supports millions of keys and certificates per customer.
Flexible Deployment
Keyfactor and Fortanix offer the flexibility to deploy as a service (SaaS), on-premise, or in a hybrid architecture.
