Documentation – Is online documentation available for the solution?
Yes, comprehensive online documentation is available to all customers. It is publicly accessible and provides the relevant information required to use the solution.
Audit Log – Can security-relevant activities be logged?
Yes, MTG Corporate PKI & CLM logs relevant activities and changes so that certificate and administrative processes can be traced. The Audit Log supports internal controls, audits, and the analysis of security-relevant events. The events and level of detail that are logged depend on the respective MTG ERS® component and its configuration.
Sub CA – Does my company have its own Sub CA in MTG Corporate PKI?
Yes, MTG Corporate PKI can be configured for your company with one or more Root CAs as well as one or more dedicated Sub CAs. This allows the PKI structure to be designed according to the respective business, organizational, or technical requirements.
Offline Root CA – When does an Offline Root CA make sense?
An Offline Root CA is a special deployment model that involves additional manual operational effort. It is kept in a highly protected environment and activated only in exceptional cases, for example when additional Sub CAs need to be created or signed. Such operations are typically required only infrequently. The key advantage of an Offline Root […]
Multiple Root CAs – Can multiple Root CAs be configured?
Yes, multiple Root CAs can be configured with MTG Corporate PKI where required. This can be useful when different trust domains, organizational requirements, or cryptographic methods need to be separated. For example, separate PKI hierarchies can be established for different security domains or for the phased introduction of new cryptographic methods.
Root CA – Can a dedicated Root CA be set up?
Yes, a dedicated Root CA can be established as part of MTG Corporate PKI. The Root Certification Authority forms the highest trust authority within a PKI and is configured accordingly during deployment. Its role is to use its private key to sign one or more subordinate Certification Authorities (Sub CAs). This establishes trust in the […]
Certificate Revocation – What are OCSP and CRLs used for?
OCSP and Certificate Revocation Lists (CRLs) make it possible to determine whether a certificate has been revoked before the end of its regular validity period. MTG Corporate PKI provides an OCSP Responder through the MTG Revocation Info Server. Full and delta CRLs can also be provided over HTTP or published to LDAP directories. This allows […]
Certificate Discovery – How can hidden or unknown certificates be systematically identified within the company?
MTG Certificate Discovery can automatically identify existing and previously unknown certificates and import them into MTG CLM. Available mechanisms include network scans for TLS certificates, searches in LDAP or Active Directory, and Certificate Transparency logs. The discovered certificates can be added to the centralized certificate inventory and evaluated based on validity period, status, and the […]
Future Use Cases – Can MTG Corporate PKI & CLM cover all important use cases?
MTG Corporate PKI & CLM covers a broad range of common enterprise certificate use cases. These include servers and applications, users and endpoints, network components, IoT systems, Microsoft environments, and automated certificate processes. Thanks to its modular architecture, different Certificate Providers, and numerous standardized interfaces, the solution can be flexibly adapted to new requirements. For […]
Code Signing – How can Code Signing be implemented with a PKI?
In Code Signing, digital certificates make an important contribution to the security, integrity, and trustworthiness of software and firmware. They make it possible to identify the publisher of an application or software package. This allows users to verify that the software was actually published by the stated company rather than by an unknown or potentially […]