CMS Enterprise

CMS Enterprise, developed by Keyfactor, is a comprehensive solution designed to manage and automate the lifecycle of Public Key Infrastructure (PKI) and digital certificates. This platform caters to small, medium, and large enterprises, offering a wide range of capabilities for various professionals and industries. According to the vendor, CMS Enterprise is used by IT professionals, security architects, PKI administrators, DevOps teams, manufacturing companies, software developers and engineers, compliance and regulatory professionals, financial services, healthcare, smart home device manufacturers, and IoT security professionals.

PKI Management: According to the vendor, CMS Enterprise provides a highly scalable PKI platform for issuing and managing trusted identities for machines and individuals in enterprise or IoT environments.

IoT Device Identity Management: The vendor claims that CMS Enterprise offers visibility, control, and automation for IoT and machine identities. It allows users to discover and automate PKI and digital certificates from a single platform, managing all IoT device identities at scale.

Code and Document Signing: According to the vendor, CMS Enterprise provides fast, secure, and flexible signing solutions. Users can protect keys and sign code easily using native tools, and the platform supports automatic code and document signing through APIs.

Flexible Deployment Options: The vendor states that CMS Enterprise offers flexible deployment options, including turnkey software appliances, hardware appliances, cloud-based solutions, as a service, or hybrid models. It allows organizations to scale up on-demand and run their entire PKI on a single instance or cluster nodes.

Centralized Visibility and Control: According to the vendor, CMS Enterprise provides proactive visibility and continuous monitoring of every certificate from a centralized console. Users can tag certificates with custom metadata for effective organization, set automated renewal alerts, schedule compliance reports, and integrate with external SIEM or ITSM tools.

Automation and Orchestration: The vendor claims that CMS Enterprise enables automated certificate enrollment through various methods. It allows secure segmentation of Certificate Authority (CA), Registration Authority (RA), and Validation Authority (VA) functions, and supports modular orchestrators for automatic certificate provisioning.

Compliance and Security: According to the vendor, CMS Enterprise ensures compliance through detailed and signed audit logs. It is Common Criteria-certified and NSA CSfC-approved, providing a secure PKI solution. The platform also offers secure private key generation and storage with integration to popular Hardware Security Modules (HSMs) and key vaults.

Flexible Signing Workflows: According to the vendor, CMS Enterprise enables the protection of sensitive signature keys without disrupting IT workflows. It integrates with platform-native signing tools and allows users to generate and store private signing keys in a centralized, FIPS 140-2 certified hardware security module (HSM).

Policy Enforcement and Compliance: The vendor claims that CMS Enterprise allows users to define granular access and usage policies for private signing keys. It integrates with identity providers for user authentication and authorization and generates key attestation to comply with CA/B forum requirements.

Centralized Management and Auditability: According to the vendor, CMS Enterprise offers centralized management and auditability of all signing operations. Users can manage and audit signing operations through a web interface and Command Line, while maintaining detailed, signed audit logs of signature requests, signing transactions, key, and certificate management events. The platform supports clustering instances for scalability, failover, and load balancing.