CertAgent

CertAgent^® 8.x is a full-featured X.509 CA that is NIAP certified for compliance with the Common Criteria Protection Profile for Certification Authorities (v2.1), and appears as an approved product on NSA’s CSfC Program Components List.

CertAgent is a customer-hosted (on-premise or cloud), self-contained, and easy-to-use Certificate Authority. It allows you to issue X.509 certificates for your employees and business partners as well as for devices (such as routers, webservers, VPNs, and internet phones). Certificates and CRLs issued by CertAgent comply with all relevant Federal and industry standards, and it can be used with hundreds of existing applications for the protection of e-mail, authentication of users and web servers, etc.

High Availability and Scalability
CertAgent instances can be replicated without the need to create subordinate certificate authorities by leveraging a PostgreSQL® or Oracle® database to which each CertAgent instance connects. High availability is achieved in the same manner by connecting the CertAgent instances to a database configured for high availability.

Use Cases for CertAgent Certificates
Implementing a Commercial Solutions for Classified (CSfC) Capability Package Use CertAgent as a component in a CSfC deployment. As an approved component in the National Security Agency’s Commercial Solutions for Classified program, CertAgent fully supports the generation and use of Elliptic Curve (EC) and RSA certificates including those compliant with NSA’s Commercial National Security Algorithm Suite recommendations (RSA-3072, ECC Curve P-384, and SHA-384).

Deploying Smart Cards for Login
Provision smart cards with certificates to enable Microsoft Windows® and Linux smart card logon.

Providing Strong Authentication to Services
Enhance the security of web browser-based applications, virtual private networks, and Wi-Fi networks.