Digital Signatures – Can certificates be used for digital document signatures?
Yes, digital certificates can be used to sign electronic documents. A digital signature makes it possible to verify who signed a document and whether the document has been modified after it was signed. MTG Corporate PKI & CLM can issue the required certificates or manage their lifecycle. The legal effect of a digital signature, however, […]
Securing Mobile Devices – How can mobile devices be secured with a PKI?
Mobile Device Management (MDM) platforms are used to centrally manage and secure mobile devices in enterprise environments. A PKI plays an important role in protecting communication between mobile devices, applications, users, and corporate services. When a PKI is combined with integrated CLM, digital certificates can be deployed and managed on mobile devices much more efficiently. […]
SSL/TLS – Can SSL/TLS web server certificates also be used?
Yes, SSL/TLS web server certificates can also be used. They are a key component in securing web applications and web services. Certificates from a publicly trusted Certification Authority are typically used for Internet-facing services so that their trustworthiness can be validated by external users and systems. Especially when managing a larger number of certificates, Certificate […]
Secure Email Communication – How do certificates protect email communication?
Email certificates play an important role in protecting electronic communications, both within a company and when communicating with external partners. They enable emails to be digitally signed, making it possible to verify whether a message was signed by the stated sender and whether it has been modified since it was signed. Certificates can also be […]
NAC – What is Network Access Control (NAC)?
Network Access Control (NAC) refers to methods used to control access by users and devices to corporate networks. Digital certificates can be used as a secure authentication mechanism in this context. A typical use case is certificate-based authentication using IEEE 802.1X. A device or user authenticates when accessing a LAN or Wi-Fi network, for example. […]
Network Security – How can a PKI help secure networks?
In Virtual Private Networks (VPNs), PKIs are used to authenticate the identities of communicating parties and establish secure, encrypted connections over public networks. This is particularly important for protecting sensitive corporate data when employees remotely access company resources, for example when working from home. Digital certificates can also be used to secure connections between company […]
Access Rights – How can a PKI support identity and access management?
Digital certificates enable secure authentication of users, devices, and systems and reduce reliance on purely password-based methods. The private key associated with the certificate serves as cryptographic proof of the respective digital identity. Certificates can be used, for example, for Windows users and computers, mobile devices, network devices, or IoT systems. In combination with systems […]
HSM – Do I absolutely need a Hardware Security Module (HSM) for my PKI?
From an IT security perspective, using an HSM to protect private keys is highly recommended. A Hardware Security Module is particularly useful when cryptographic keys need strong protection against both software-based attacks and physical attacks on the underlying infrastructure. HSMs generate, store, and manage cryptographic keys and therefore provide an important security foundation for protecting […]
Control & Approval – Can it be controlled who is allowed to request or approve certificates?
Yes, certificate requests can be configured for either manual or automatic approval. A four-eyes approval principle can also be implemented where required.
Realms – How can the PKI be structured by business unit in CLM?
Different business units can be represented clearly and flexibly in MTG CLM using “Realms.” This allows access rights for digital certificates to be organized individually and aligned with the company’s organizational structure. In combination with the role and permissions system, Realms also make it easy to provide department-specific self-service capabilities. Business units can perform defined […]