Public Certificates – Can public certificates also be used and obtained directly?
Yes, public certificates can be centrally requested and managed through MTG CLM. Direct integrations with different Public CAs and Certificate Providers are available for this purpose. MTG CLM currently supports, among others, GlobalSign, PSW, and PCSP for Deutsche Telekom Security. Existing certificates can also be imported into MTG CLM. The available certificate types, cryptographic methods, […]
Policies – Are templates available for common use cases that can be used directly?
Yes, every MTG PKI & CLM instance comes with a selection of predefined Policies for common standard scenarios. These templates can be used directly and adapted as needed. The standard set includes Policy templates for SSL/TLS servers and ACME for issuing typical TLS certificates for web servers. Templates for Machine, SCEP, EST, and CMP are […]
Policies – How do Policies and certificate templates help prevent misconfigurations?
Policies consolidate the rules required to configure different types of certificates. This helps ensure that entries are complete, correct, and compliant. For example, tailored templates can be defined for email certificates, server certificates, connected hardware, or mobile devices. Policies can be used to specify approved algorithms and permitted key material. They can also define certificate […]
Roles & Permissions – What capabilities does the role and permissions management system provide?
Role and permissions management in MTG CLM can be centrally controlled and provides detailed options for assigning permissions to CLM users. For example, permissions can be restricted to specific Realms or individual Policies. These settings can be defined for individual users as well as entire business units or specific policies. This makes it possible to […]
Reporting & Monitoring – What reporting and monitoring capabilities does the solution provide?
With MTG CLM, companies can centrally monitor the status and validity periods of their certificates. A configurable notification system provides information about relevant events and upcoming certificate expirations, allowing renewal activities to be initiated in time. Dashboards as well as search and filter functions provide a quick overview of the certificate inventory. Results can be […]
Certificate Creation – How can certificates be created through CLM?
The platform is designed so that certificates can be created even without in-depth PKI expertise. Much of the technical complexity remains in the background, while the user interface supports simple, secure, and practical operation. This allows companies to start creating certificates directly and, if required, rely on the additional support of experienced PKI experts. A […]
Certificate Import – Can existing certificates be imported into CLM?
Yes, existing certificates can be integrated into the centralized certificate management system. Certificates can be imported manually or, where the technical requirements are met, automatically through Certificate Discovery. Public certificates in particular can be easily integrated, for example through scanning mechanisms.
Keycloak – What is Keycloak used for in MTG ERS® applications?
Keycloak provides centralized identity and access management within MTG ERS® applications. This allows users to be authenticated centrally and login processes to be managed across different MTG ERS® components. Existing identity and directory services can be connected through Keycloak. Supported systems include Microsoft Active Directory and Microsoft Entra ID. Keycloak also enables Single Sign-On, different […]
Why is Certificate Lifecycle Management becoming increasingly important for companies?
The number of digital certificates and machine identities continues to grow due to cloud infrastructures, IoT, mobile devices, microservices, Zero Trust architectures, and increasing automation. At the same time, requirements for security, transparency, and traceability are increasing. Centralized Certificate Lifecycle Management helps companies manage this growing certificate landscape in a controlled manner and automate certificate […]
Is a CLM also useful for smaller companies?
Yes, a CLM can also be useful for smaller companies, particularly when the number of certificates is growing or certificates are used for business-critical systems. Even a manageable number of manually administered certificates can increase operational effort and the risk of outages. The key factors are therefore less about company size and more about the […]