TLS Protect

Digital certificates are a core component of the larger encryption landscape for securing communications and authenticating users and systems for protocols such as SSL and IPSEC.

While certificates and their associated private keys are leveraged heavily for mission-critical applications, they come with overhead.

First, the trust and validity of a certificate is time limited—typically valid for one year—and must be renewed before the life-cycle period expires or system outages and downtime occur.

Second, although the public portion of a certificate is freely transmitted, the private portion must be kept secret and properly managed to avoid data or system compromise.

Finally, the certificates and private keys must adhere to current encryption standards and best practices.

Venafi TLS Protect enables organizations to rapidly develop an accurate certificate inventory and identify security and operational risks.

Enterprise Key and Certificate Management (EKCM) is cross-functional, requiring many departments and employees to work together to manage keys and certificates.

Organizations can quickly evaluate their compliance with corporate and regulatory folders and establish a concise methodology to ensure compliance. With built-in management and policy best practices, Venafi TLS Protect helps eliminate data breaches, security audit failures and unplanned system outages.

Venafi TLS Protect enables organizations to quickly quantify their certificate and private key-related risk. Once quantified, it is possible to manage that risk and drastically reduce exposure.

Stepping through the workflow of EKCM.

To address the needs of diverse organizations with varied security requirements, Venafi TLS Protect provides four levels of certificate management.

• Discovery (1 and 2)
• Monitoring and Validation (3 and 4)
• Enrollment (6)
• Provisioning (7)