What tasks does a CLM perform?
A CLM supports the entire lifecycle of digital certificates. This includes certificate requests, issuance through connected Certification Authorities, deployment, monitoring, renewal, and revocation. MTG CLM enhances these functions with Certificate Policies, monitoring and reporting, notifications, role and rights management, and various automation and integration interfaces.
Why is Certificate Lifecycle Management important?
As the number of digital certificates increases, the effort required to manage them also grows. Without a centralized CLM, expired or insufficiently renewed certificates can lead to outages and security risks. MTG CLM provides transparency into existing certificates, their status, validity periods, and locations of use, and helps companies automate certificate processes and identify risks […]
What is CLM (Certificate Lifecycle Management)?
Certificate Lifecycle Management (CLM) refers to the centralized management of digital certificates throughout their entire lifecycle—from request and issuance to use, monitoring, renewal, and revocation. With MTG CLM, companies can centrally control, automate, and transparently manage these processes.
What is the difference between On-Premises and Managed PKI & CLM?
With an On-Premises PKI & CLM, MTG Corporate PKI & CLM is operated within the company’s own infrastructure and fully integrated into the existing IT and security architecture. This allows companies to determine the level of control they want to maintain over systems, processes, and key management. With DARZ Managed PKI & CLM powered by […]
What is the difference between private and public certificates?
The key difference lies in the trust model. With private certificates, the company or operator of the private PKI determines which systems trust its CA. They are therefore particularly suitable for controlled enterprise and infrastructure environments. Publicly trusted certificates, by contrast, are issued by Public CAs whose trust anchors are already included in widely used […]
What is a public certificate?
A public certificate is a certificate issued by a publicly trusted Certification Authority (Public CA). The CA’s root certificates are included as trusted roots in widely used operating systems, browsers, and applications. Public certificates are particularly necessary when systems or services need to be trusted by external endpoints that are not managed by the company, […]
What is a private certificate?
A private certificate is a digital certificate issued by a private or enterprise-controlled trust infrastructure. It is trusted only by systems on which the corresponding private CA has been configured as a trust anchor. Private certificates are suitable, for example, for internal servers and applications, users and devices, VPN and network access, machine-to-machine communication, or […]
What does On-Premises or Managed operation mean for a PKI?
With an On-Premises PKI, the PKI is operated within the company’s own infrastructure and integrated into the existing IT and security architecture. Operation and management can be handled by the company’s own team or by MTG. Alternatively, MTG Corporate PKI & CLM can be obtained as a Managed Service through our partner DARZ. The service […]
When does it make sense to operate your own PKI, and when can a Managed Service meet regulatory requirements?
An in-house On-Premises PKI is particularly useful when companies require a high degree of control over infrastructure, processes, key material, and integrations, or when they intentionally want to retain responsibility for PKI operations themselves. A Managed Service can be a suitable alternative if technical and regulatory requirements can also be met through an externally operated […]
What options are available for obtaining or operating certificates and PKI services?
Companies can use different models depending on their use case. Publicly trusted certificates are obtained from Public CAs or trust centers and are used, for example, for publicly accessible websites, servers, or services. For private certificates, companies can operate their own PKI or use a Managed PKI service. With an On-Premises solution, the PKI remains […]