Page Comparison

Use trusted certificates on multiple devices

This collaboration between Nexus and the German Trust Service Provider D-TRUST, which is a 100% subsidiary of the Bundesdruckerei, allows the use of PKI certificates for signing and encryption on various hardware devices, such as smart cards, mobile phones and laptops, with automated management processes.

Secure exchange of data using certificates from trusted root

PKI certificates are ideal for secure emails and data transfer. Organizations need to use certificates for signing and encryption in internal and external communication, without forcing the receiver or their IT department to manually set up trust to each sender. Servers need to be secured by using SSL/TLS certificates. To ensure secure processes throughout the business, a fast and efficient way to request and manage certificates is necessary. 

For the receivers that use signed or encrypted information, it is tedious manual work to set up trust to various certificate authorities, if certificates do not come from a trust service provider.

Manage certificate lifecycle

Certificates can be distributed in various formats and on different hardware devices such as smart phones, laptops, smart cards or tokens. The certificates and connected devices must be managed throughout the lifecycle.

For efficiency reasons, automated processes are preferred for many cases, such as expiry of certificates or lost credentials. For example, if a user loses a phone with a mobile ID or a laptop with a softtoken, the certificates must be recovered to still have access to the encrypted information. 

Solution: Smooth management of certificates from Trust Service Provider

With the solution from Nexus and D-TRUST, you can use PKI certificates from a public trusted root for signing and encryption of data and for server authentication and encrypted communication. These certificates as well as the various credentials are managed easily and efficiently in one central system.

Certificates on the right security level for your need, for example qualified or advanced, from a qualified German Trust Service Provider D-TRUST, let all receivers have immediate trust in your emails or data, without having to set it up manually.

Centralized identity and credential management with automated processes and self-service makes it easy to be in control and avoid manual work.

The solution allows a flexible use of certificates, thanks to support for multiple smart cards, keyfobs, mobile identities, softtokens and virtual smart cards.

Key archiving and recovery (KAR) is available, to recover keys for reading encrypted emails, and so on.