Managing Identities Lifecycle

Certificate-based (PKI) authentication is the best practice for device authentication and there could be more than one digital certificate in the IoT device for accessing different services of IoT application. Therefore, managing the certificates for each IoT device is critical since the invalid or expired certificates can lead to failures of IoT application. Our managed PKI solution (INeS CMS) ensures the connected IoT devices are authenticated and users can manage the life-cycle of digital identities in the IoT devices by their preference.

Picto SEAL SQ - Open interfaces support-1

Openness

INeS CMS provides open interfaces (RESTful APIs & EST) for automating the process from certificate issuance to certificate renewal/revocation.

Certificate inventory

Certificate and its status can be viewed in a centralized web portal, the statistical data of certificates are shown on a dashboard.

Shorter validity of identities

Thanks to the managed PKI solution, users can design a shorter validity of certificates and renew them frequently instead of one certificate for the entire life-cycle of an IoT device.

Flexibility

The time when to issue the requests for certificate enrolment, renewal and revocation can be flexible based on IoT application and users can customize the workflow of managing the certificate life-cycle.

Centralized web portal and dashboard

Users can view the statistical data of certificates in the dashboard of INeS CMS.

Certificate Management

INeS CMS supports the definition of certificate templates, the generation of standalone certificates or batch certificates, and the management of the issued certificates (i.e. monitor, revoke, re-key).

Log auditing

INeS CMS logs each operation in CMS, i.e. user login, certificate enrolment, certificate revocation, so that users can monitor the status and historical data of certificates.

Picto SEAL SQ - ID generation & management

Open interfaces support

RESTful APIs and EST enrolment are available for automating the certificate enrolment process and managing the life-cycle of devices.

Public cloud integration

INeS CMS integrates with public cloud services like AWS IoT Core and Azure DPS/IoT hub. IoT devices can easily on-board to a public cloud by using the certificates issued by INeS CMS for device attestation.