PKIaaS.io

PKIaaS.io is a public key infrastructure as a service provider designed to simplify the deployment of PKI. According to the vendor, PKIaaS.io offers a range of features and functionalities that aim to cater to the needs of IT administrators, security professionals, software developers, financial institutions, and healthcare organizations. With PKIaaS.io, businesses can manage their certificates, automate certificate issuance and renewal, and ensure secure communication and data integrity.

Key Features

Revocation: According to the vendor, PKIaaS.io allows users to easily revoke certificates and download the certificate revocation list (CRL) for offline use. Additionally, PKIaaS.io provides an online certificate status protocol (OCSP) responder for real-time certificate status checking.

Code Signing: PKIaaS.io offers a "Code Signing" starter template that enables users to request a code signing certificate. The product supports signing with timestamps using RFC 3161 and Microsoft Authenticode compliant timestamping server.

Automation: PKIaaS.io provides simple certificate enrollment protocol (SCEP) and automated certificate management environment (ACME) services to automate certificate issuance and renewal for all devices and servers.

Renewal: According to the vendor, PKIaaS.io offers multiple certificate renewal options through SCEP and a web-based method using mutual TLS (mTLS) for client certificate authentication. The product also includes validation of ownership for the certificate being renewed.

Multi-Tiered CA: PKIaaS.io allows users to build a multi-tiered root/intermediate certificate authority (CA) structure on its platform or as an intermediate to an existing root CA.

Secure Storage on YubiKey: The vendor states that PKIaaS.io securely stores private keys on a YubiKey, eliminating the need for backups as all state is maintained on the device. The product also offers Docker container deployment with SoftHSM2 for added flexibility.

Key Generation and Import: PKIaaS.io enables users to generate keys within the YubiKey or import them, providing backup copies and flexible key management options.

Redundant IoT-HSM Appliances: According to the vendor, PKIaaS.io allows for the deployment of multiple IoT-HSM appliances in different locations to ensure high availability. The product automatically routes signature requests to available appliances.

Multiple Coexisting Certificate Authorities: PKIaaS.io supports the storage of multiple certificate authorities on one or more YubiKeys. Each authority maintains an independent, persistent connection to PKIaaS.io.

Intuitive Web Interface: PKIaaS.io offers an easy-to-use web interface for managing all aspects of PKI. According to the vendor, this interface simplifies the management of certificates and related tasks.