primeID AUTOMATE

Certificate Discovery is the first and crucial step toward professional certificate management. It automatically detects all certificates in your infrastructure, regardless of who issued them (internal CAs as well as external public CAs), where they are located, or how they are managed.

primeid AUTOMATE enables the operation of multiple independent organizational units, known as clients, on a shared infrastructure without being able to see or influence one another. This also forms the basis for usage-based billing of CLM services.

Multitenancy is a crucial factor, particularly in the areas of PKI and certificate lifecycle management:

• A large Organization can map subsidiaries as separate tenants, each with its own CA hierarchy, its own certificate templates, and its own administrator
• A managed service provider can provide its customers with a dedicated PKI environment, operated on a shared platform
• A government agency can clearly separate departments with different security requirements
• An IT service provider can offer certificate management as a service. Scalable, efficient, and compliant.

A central dashboard displays each certificate along with its expiration date, issuing CA, responsible entity, and risk assessment. No more blind spots.

Certificates that are about to expire are detected early, reported, and automatically renewed depending on the configuration. Planned actions, no time pressure, fewer errors, no outages, and no ad hoc tasks.

The upcoming migration to post-quantum cryptographic (PQC) methods requires careful planning and implementation. Weak algorithms, short key lengths, and expired or revoked certificates become immediately apparent and can be specifically addressed. An inventory of the algorithms and protocols in use is always the starting point for this. primeID AUTOMATE is a powerful, centralized tool for this first step and for the entire migration process.

See also:

Post-Quantum Migration Services | CRYPTAS

NIS2, ISO 27001, BSI IT-Grundschutz—regulatory requirements mandate proof of the status of your security infrastructure. Certificate Discovery automatically provides the foundation for this.

primeID AUTOMATE supports:

Enrollment and automation protocols
, ACME (RFC 8555), SCEP (RFC 8894), EST, CMP, Microsoft Autoenrollment

API protocols
SOAP and REST APIs

Directory & Identity Protocols
LDAP (Active Directory and OpenLDAP) with automatic distribution of certificates and CRLs, as well as LDAP v3 compliance (RFC 4519, RFC 4524). SAML for SSO integration with existing IAM systems

Revocation & Status Protocols
OCSP, CRL, and Delta-CRL, configurable per certificate profile

Communication & Security Standards
TLS and IPsec for encrypted communication between devices; for telecommunications and IoT, international standards such as ETSI, IEEE, and 3GPP are supported

primeid AUTOMATE supports:

FIPS 203, ML-KEM, based on CRYSTALS-Kyber
FIPS 204, ML-DSA, based on CRYSTALS-Dilithium
FIPS 205, SLH-DSA, based on SPHINCS+
Coming soon:
FIPS 206, FN-DSA, based on FALCON