Key Management

A key management service (KMS) is a managed solution that simplifies the creation and control of cryptographic keys that are used to protect your enterprise’s data. Futurex key management services provide a secure, functional platform for businesses to create and manage these different keys and certificates all in one convenient location. Users can store, delete, and keep track of existing keys and certificates as well as generate new keys and certificates as needed.

The Key Management Enterprise Server (KMES) Series 3 is a scalable and versatile solution for managing keys, certificates, and other cryptographic objects. Built around Futurex’s cryptographic technology, the KMES’s modular system architecture provides a custom solution to fulfill the unique needs of organizations across a wide range of industries. Full integration with Futurex’s solution suite enables the KMES to support unparalleled functionality expansion options as well as full management of Public Key Infrastructure (PKI) and certificate authority (CA).

Simply put, the KMES Series 3 is Futurex’s Enterprise-Class Key & Certificate Management Platform offering lifecycle Management, robust user permissions, and full automatic capabilities.

• As an enterprise-class product, the KMES manages large quantities of keys, certificates, and other cryptographic objects in a stream-lined and automated way.
• Define automatic expiration rules to remove and replace keys, algorithms, and protocols on a user-defined schedule, without traveling to a data center.
• Set automatic alerts to monitor the status of your enterprise key and certificate infrastructure.

• Full key and certificate lifecycle management
• Enterprise certificate and registration
• Authority turnkey application encryption
• Remote key management for ATM and point of sale
• Robust user and group permission system
• Vaultless tokenization

• Supports mutual authentication under a trusted root certificate to establish a trusted PKI among all infrastructure components
• Generates and manages self-signed certificates necessary to establish a trusted PKI
• Simplifies object management through custom userdefined attributes and key group format cloning for replication of data structures

• All major card brands supported
• Supports EMVCo-compliant self-signed issuer certificate creation
• FIPS 140-2 Level 3 compliant
• ANSI X9.2
• PCI HSM

Hardened, Enterprise-Class Key & Certificate Management Platform

• Key and certificate lifecycle management and establishment of an organized PKI
• User-defined attributes and key group format cloning for replication of data structures
• Support of tens of millions of cryptographic objects
• Functionality available for ATM and Point of Sale remote key loading

Enterprise Application Encryption and Data Protection

• FIPS compliant security for application-based data protection
• Centrally manage the full key, certificate, and policy lifecycle
• Easy-to-use architecture simplifies and expedites deployment
• Segregated key containers create single cryptographic resource pool for multiple applications
• Web-based workflow management for automation of key lifecycle tasks
• Standards-based libraries for easy integration: KMIP, C# .NET, Java

Unified Cryptographic Platform

• Certificate Authority (CA) and Registration Authority (RA) management on single platform
• Designed for turnkey implementation
• Customized audit reports and activity logging

Scalable Integration

• Nth degree scalability with multiple KMES devices
• Automatic synchronization of keys and certificates between connected devices
• Masterless Peering enables high availability architecture

Enterprise Certificate Authority Features

• Virtually limitless scalability of certificate authorities
• Supports both CRL, OCSP, and SCEP for certificate status management
• Extended validation certificates

Registration Authority Features

• Web-based RA allows certificate signing requests to be submitted by users and validated by an authentication user group
• Automated e-mail templates for workflow management
• Custom white labeling for registration authority portal
• Integration with LDAP for auto-enrollment

Quantum-Safe Hybrid Certificate Authority Solution

• Simultaneously sign with classical and quantum-safe algorithms, eliminating need to migrate
• Mitigates the inevitable quantum computing risk

Yes, the KMES Series 3 integrates fully with Azure Key Vault. View the integration guide for Azure Key Vault here.