News Categories
20Indeed Certificate Manager 27Releases 9certificate management 7PKI 10PKI management 9Indeed Access Manager 7access management 5authentication 2MFA 3multi-factor authentication 20Indeed Privileged Access Manager 12PAM 11privileged access management 7Release notes 3Indeed ESSO 11News 1#AccessManagement 1#IdentityManagement 2IAM 19Indeed CM 6Press release 1CA 1CertificateAuthority 1CertificateManagement 2CMS 2cryptovision 2Smart cards 2smartcardmanagement 4#RISK2019 43Events 7Uncategorized 3#mindshare 19Indeed PAM 4webinar 8Video 7Indeed AM 10partnership 20events 12Release 1BlackHatEurope2019 1Coronavirus 1COVID-19 3video 2Indeed Identity News 10news 1Corporate Systems 1All News 7Interviews 3interview 23Company news 1use case 3BusinessBreakfast 1AnalyticalReport 1IndeedPAM 1KuppingerCole 1Cryptonite 1Trustech 2IDCsummit 3it-sa 1conference 1GISEC 1IDC 1SITAfrica 1compliance 3Axidian Privilege 1all news 1Axidian CertiFlow 8Axidian Shield 6Identity Security 6ITDR 3GITEX 3BlackHatMiddleEast 1CyberX 2Zero Trust
News
New Indeed CM 6.2 release shapes the future of PKI
Posted by anna.vlasenko on 07 July 2020 04:02 PM
Indeed Certificate Manager 6.2 release

We have added a number of new functionalities to the Indeed CM software since the last release. The brand new features include the introduction of the “Dashboard” section and the support of certificate issuance for the Windows registry and Windows Hello for Business. The existing functionality has also been improved. For example, now you can track smart card certificates not only at the time of their issue but also after an update. Read more about all the changes below.

Dashboard

This new section displays the summary information regarding the Indeed CM status. The following sub-sections can be accessed:

  • The total number of licenses as well as the number of active licenses.
  • The number of registered, pending and active Agents together with the status of the tasks assigned to them. 
  • The number of smart cards according to their status in the system, the status of their contents and certificates, and whether or not they require updating due to users switching the policy or changing the certificate template set in the current policy.
  • The status of service certificates to be integrated with the certificate authorities.
  • The Indeed CM user status.
indeed CM Dashboard

Adding RSA certificates to the Windows registry

A new Registry smart card type was introduced in addition to physical and virtual smart cards. Similarly to smart cards based on Trusted Platform Module 2.0, the Registry card type is linked to the end user’s workstation. The Self-Service functionality allows the users to request and add certificates to the local machine and/or current user certificate stores using their own credentials.

Adding RSA certificates

Support for Windows Hello for Business devices

Another new type of supported devices is smart cards based on Windows Hello for Business. A Windows Hello for Business configuration manager can be accessed through the Indeed CM Self-Service functionality to create a smart card and set a PIN. In addition to the user authentication certificate issued automatically at the time of WHfB smart card creation, Indeed CM also enables the users to add any other certificate to the same container. For instance, an email signing certificate.

email signing certificate

Requesting and adding additional certificates to the existing Windows Hello for Business container.

existing Windows Hello for Business container

Status-based user search in the Indeed CM database

The previous versions of the Indeed CM allowed user search only in the Active Directory. Now we have also added status-based search in the Indeed CM database. The Indeed CM administrators and operators now can much more easily identify locked users (those who exceeded the maximum number of security question answer attempts) or users that failed to set the answers to the security questions.

status-based search

Batch device addition from a file using the Management Console web interface

Large batches of new devices can now be easily added to the system. All you have to do is download a file with a list of serial numbers (available from the equipment manufacturer or the supplier) and specify the administrator PIN that must be associated with these devices. The supported file extensions are .txt и .csv. 

Batch device addition

Other changes in Version 6.2

  • All supported third-party certificates can now be tracked and printed out in case of device updates (also using an agent), provided that this option is enabled in the device usage policy.
  • Specific products are added for eTokenProJava72K и IDPrime (Gemalto) device types.
  • Support for YubiKey 5 Series devices.
  • Optimized Active Directory performance when accessing user attributes.
  • The sAMAccountName attribute has been added to the Active Directory attributes. New functionality has been added to assign user roles using the sAMAccountName attribute and to use this attribute when conducting an advanced search of the user directory.

The post New Indeed CM 6.2 release shapes the future of PKI appeared first on Indeed-ID Blog.
Comments (0)
Post a new comment
 
 
Full Name:
Email:
Comments: