Embed Size (px)
Citation preview
one software for allPKCS#11
standard middleware
all platforms
Overview:
• platform, vendor and full application independence
• all computer and mobile platforms, all vendors, form factors and applications
• optional extension for virtual smart cards
• supplier and card-issuer independent token support
• designed for all-scale government, enter-prise and authentica-tion projects
smart security interface
charismathics smart security interface©
The charismathics Smart Security Interface CSSI© is the only truly independent PKI middleware in the world. Forget all you know about the integration of public key infrastructures, smart card hardware or key lifecycle management. charismathics® is presenting a new breed of middleware to you – the only token agnostic PKI client middleware available worldwide. CSSI© now supports more than 500 different chip types of all major token vendors, including government
specifications such as PIV, CAC, CIE/CNS, IAS ECC, RIC and many others. Other than with inbuilt products of 3rd party vendors, it ensures cross platform compatibility across your IT system, and unlocks you from proprietary vertical products. CSSI© also includes the support of virtual smart cards, soft tokens and our iEnigma® PKI smart phone app. All form factors. All vendors. All platforms. All applications. And all backend software. Isn’t this the kind of software independence you have already been looking for?
• features supplier- and system-independent PKI token support for all current computer platforms, tablet and smart phone devices
• works with most of all worldwide smart cards, USB keys, RFID cards, flash drives.• supports virtual smart card architectures based on all current TPM modules• supports all major pre-boot environments. UEFI or for hard disk encryption software • enables cross-platform life-cycle-management of all tokens and digital identities• plugs into all PKI systems and all standard software applications such as internet
browsers, mail and VPN clients, Single Sign-On frameworks and 3rd party applications • charismathics software can be added into any new or even existing PKI network
architecture
Benefits
4D Independence
charismathics offers a complete re-design of PKI middleware, providing 4D independence of platform, application, back-end management and token form factor. Through our large-scale enterprise deployments, we have achieved and outstanding product performance, a maximum of technical acceptance and a software stability. No matter whether you have or intend to use certificate based authentication: our software can be added into any new or even existing PKI scheme and network architecture. Our large number of supported token types and the independence of the form factor offer full flexibility for your organization to freely opt for the end point security of your choice and cutting down your investment – may it be as simple as by an increasing competition among vendors.
*) please consult our application and system compliance list on our website www.charismathics.com/cssi
© All trademarks, trade names, service marks, and logos referenced herein belong to their respective organizations and companies.
charismathics gmbh47 Sendlinger StMunich, Germany 80331
[email protected] +49 (89) 3090-6700
charismathics inc.2033 Gateway Place Suite 500San Jose, CA 95110, USA
[email protected] +1 (408) 573-6440
CSSI© Product Modules
embe
dded
to
ken
KSP
UIC
C
PKC
S#11
toke
n D
iEni
gma
user
inte
rfac
e
toke
n co
nfigu
rato
r C
STC
rem
ote
cont
rol
inte
rface
soft
toke
n
CSP
TPM
min
i driv
er
NFC
mSD
smar
t car
ds
USB
key
s
CCID simulation
CSCP logon layer
Active Directory Integration
CSSI framework architecture
CSSI 5.0Windows
CSSI 5.0TPM
CSSI 5.0 Mac OS X
CSSI 5.0 Linux
CSSI 5.0Oracle Solaris
available now now now now now
platformswindows XP and above including windows 8.1
android 3.0 and above
macOS X 10.5 and above including maverick
linux kernel 2.6and above. all linux distribution on request
solaris X86 and Sparc architecture
supported PKI modules please consult our application and system compliance list on our website www.charismathics.com/cssi
pre-boot systemsCheck Point, McAfee, Symantec, Secude, Sophos
no no no no
profile diversity yes yes yes yes yesbiometrical interface yes (MOC) yes no no noRSA key length up to 4096 bit up to 2048 bit up to 4096 bit up to 4096 bit up to 4096 bitECDSA key length up to 512 bit no up to 512 bit up to 512 bit up to 512 bitproduction version yes no no yes nomulti language english, french, german, spanish, others upon requestbranding optional optional optional optional optional
Product Overview *)
Product Features
• multi smart card chip platform support: JCOP, jTOP, Cosmo ID, CardOS, TCOS, StarCOS, and most other native and java card implentations of 3rd party vendors
• multi interface standard support: PKCS#11, MS-CAPI, CNG/mini driver, tokenD, CTAP
• multi client OS platform support for Windows XP and higher including Win 8.1, Linux Kernel 2.6 distributions, Mac OS X.5 and higher including Maverick, Oracle Solaris
• optional multi card profile support e.g. for PKCS#15, PIV, CAC, SSID, SigG, FineID, CNS, IAS ECC, PIV, ActivIdentity; flexible extension and modification or completely new integration available upon request
• full integration of PKCS#11 commend set• support of mobile devices, virtual smart cards
and soft tokens• supporting smart phones to replace hard tokens
for Windows, iOS, Android and BlackBerry• fully integrated Secure PIN Entry• UEFI support (Q2 2014)• support proprietary pre-boot environments:
CheckPoint, McAfee, Symantec, Sophos etc.• extension tool to manually integrate new
tokens into the system• optional Security Token Configurator for
smaller organizations• optional mass production versionoptional mass
production version
Whether you are a small or a big enterprise, just introducing PKI, or you are migrating from one system towards another, or you have to migrate different systems into a single one, the CSSI product family may provide the answer.provide the answer.
