News

New Products Optimized for Public Key Infrastructure Management of Virtual Private Networks

SSH Communications Security (HEX: SSH1V), a world-leading developer of Internet security technologies, today announced the SSH CertifierTM PKI Product Family. The new family of products provides a complete certificate life cycle and token management system for advanced Public Key Infrastructure (PKI) deployment.

The SSH Certifier PKI Product Family includes the latest version of the companys Certifier product (version 2.0), which incorporates Certification Authority (CA) and Registration Authority (RA) components, a commercial database, Lightweight Directory Access Protocol (LDAP) directory, and the newest family members, SSH Token MasterTM and SSH AccessionTM. This integrated line of products eases the installation and maintenance of the essential components of a comprehensive PKI. The modularity of the components and support for installation on multiple machines and different platforms makes the line of products one of the most flexible, scalable and comprehensive PKI solutions sets available in the market.

"The SSH Certifier PKI Product Family is one of the first product families suitable for enabling various PKI deployment schemes - from small departments to large operations such as service providers. The components included in this package bring the PKI to the desktop user in an easy, understandable and cost-effective way," said Tatu Ylönen, founder, chairman and CTO of SSH. "Wide support for standards such as CMP makes the SSH Certifier line of products an excellent choice for organizations looking for a scalable and flexible system for certificate life-cycle management. For VPN vendors, SSH Certifier provides the central PKI management system for simple administration and scalability, along with out-of-the-box applications for immediate usability and benefit."

SSH Certifier PKI Product Family includes the seamless integration of these major products:

SSH Certifier 2.0 Certification Authority/Registration Authority: SSH Certifier 2.0 is the core product in the SSH Certifier Product Family. Delegation of trust through a PKI to support corporate business policies and practices is easily managed with SSH Certifier 2.0 through well-known Web interfaces and extensive enrollment support. Based on standards such as CMPv2 (Certificate Management Protocol version 2), SCEP (Simple Certificate Enrollment Protocol) and, PKCS#10 (Public Key Cryptography Standard), the certificate enrollment process is enabled from almost any PKI-aware application. Moreover, CA hosting, a trusted third party and many other PKI-related business services are easy to implement.

SSH Token Master: A new member of the SSH Certifier Product Family, the SSH Token Master, provides centralized personalization and management of smart cards and tokens. With personalization support for a single token or in batch mode, SSH Token Master is particularly flexible for use in small departmental deployments or large enterprises. SSH Token Master may also be implemented as the RA (Registration Authority), if necessary, in a PKI deployment, because certificates are requested using standards-based protocols (CMPv2). The SSH Token Master fulfills users needs for an easy-to- use standards-based smart card and token management utility. SSH Token Master supports numerous smart card readers, tokens, and standard certificate enrollment through standards-based interfaces such as PKCS#15, PC/SC (Personal Computer/Smart Card) and CMPv2.

SSH Accession: Another new member of the SSH Certifier Product Family, SSH Accession, brings the power and usability of PKIs to the desktop by offering an easy method for clients to benefit from the use of digital certificates and smart cards with the most ubiquitous applications Netscape Navigator and Microsoft Internet Explorer browsers and Microsoft Outlook on multiple platforms. With support for PKCS#11 and MSCAPI (Microsoft Crypto Application Programming Interface), SSH Accession software token- enables these and other applications. Additionally, with access via a smart card or other token, users enjoy the added security two-factor authentication provides at sign-on.

About SSH Certifier

SSH Certifier builds on the standards and initiatives designed to promote interoperability among different vendors PKI authentication products and services. SSH is an active participant in Internet Engineering Task Force (IETF), PKI Forum, European Telecommunications Standards Institute (ETSI) and 3rd Generation Partnership Project (3GPP). SSH recently joined the European Forum of Electronic business (EEMA) and is an active participant in EEMAs PKI Challenge. Interoperability tests at the latest PKI Forum were very successful for SSH, demonstrating SSHs technological advancements in PKI. The SSH Certifier product can be used to issue and manage Internet Protocol Security (IPSec) certificates for both individual users and network devices within VPNs, OEM systems targeting corporate enterprise environments and ISPs. SSH Certifier also features easy- to-use Web-based configuration tools, offering network administrators the ability to manage the PKI from a central or remote location.

Product Pricing and Availability The SSH Certifier PKI Product Family is scheduled to ship in April 2001. Please contact SSH sales representatives for pricing and further details.

© 2002 SSH Communications Security Corp. All rights reserved. ssh® is a registered trademark of SSH Communications Security Corp in the United States and in certain other jurisdictions. All other names and marks are property of their respective owners.