IoT PKI – What is MTG IoT PKI?
MTG IoT PKI enables the secure and scalable creation of digital device identities directly during the manufacturing process. Each device receives a unique, cryptographically secured identity and can therefore be reliably authenticated before it leaves the factory. The solution is specifically designed for industrial series and mass production and supports high production volumes with short […]
CLI – What capabilities does the MTG ERS CLI Client provide?
The MTG ERS CLI Client makes it possible to use MTG CLM functions directly from the command line and integrate them into scripts or automated workflows. The CLI Client is available for various Windows and Linux platforms. From the command line, users can, among other things, request certificates, check the status of certificate requests, and […]
REST API – What capabilities does the MTG CLM REST API provide?
The MTG CLM REST API makes it possible to integrate certificate processes into existing applications, platforms, and automation workflows. This allows companies to interact with MTG CLM programmatically and automate certificate management processes without relying exclusively on the graphical user interface. The API is particularly suitable for custom integrations and customer-specific workflows where standardized interfaces […]
CMP – What is the Certificate Management Protocol and what is it used for?
CMP (Certificate Management Protocol) is a standardized protocol for comprehensive certificate management processes within a PKI. It supports, among other things, the request and management of X.509 certificates as well as various mechanisms for securing and authenticating communications. With MTG CMP, MTG CLM provides a corresponding interface. Certificate requests are processed according to the Policies […]
EST – What is Enrollment over Secure Transport and what is it used for?
EST (Enrollment over Secure Transport) is a standardized protocol in accordance with RFC 7030 for the secure, automated request and provisioning of certificates over TLS. It is particularly suitable for IoT, mobile, and embedded systems, as well as other devices that need to automatically obtain and renew certificates. With MTG EST, this process can be […]
SCEP – What is the Simple Certificate Enrollment Protocol and what is it used for?
SCEP (Simple Certificate Enrollment Protocol) is a standardized protocol for the automated request and renewal of digital certificates. It is supported in particular by network devices, Mobile Device Management systems, and other enterprise systems. With MTG SCEP, MTG CLM provides a SCEP interface in accordance with RFC 8894. This allows compatible devices and systems to […]
ACME – What is the Automatic Certificate Management Environment and what is it used for?
ACME (Automatic Certificate Management Environment) is a standardized protocol for the automated request and renewal of certificates. It is commonly used for SSL/TLS certificates on web servers, but is also suitable for cloud-native environments such as Kubernetes or OpenShift. With MTG ACME, MTG CLM provides an ACME interface in accordance with RFC 8555. This allows […]
Connecting to the Customer Environment – How is the connection to the customer environment established?
With our Managed PKI & CLM, your enterprise environment is connected using secure access mechanisms. By default, a site-to-site VPN connection is established between your infrastructure and your dedicated Managed PKI & CLM environment. Alternatively, a connection over the public Internet is possible. In this case, access can be restricted to defined IP addresses. All […]
Connecting Public CAs – Is it possible to connect Public CAs to MTG CLM?
Yes, Public CAs can be connected to MTG CLM. This allows public certificates to be centrally managed and automated together with private certificates through MTG CLM. MTG CLM currently supports direct integrations with GlobalSign, Deutsche Telekom Security through PCSP, and selected Sectigo certificates through the PSW GROUP. Existing certificates can also be imported into MTG […]
Connecting Private CAs – Is it possible to connect other private PKIs to MTG CLM?
MTG CLM supports the integration of different Certificate Providers. For the direct integration of an existing external private PKI, the Microsoft CA Certificate Provider is currently the primary supported option. This allows an existing Microsoft PKI (AD CS) to remain in operation while being managed through MTG CLM. A generic direct integration of arbitrary private […]