Keyfactor CLAaaS : Pionnier de la gestion du cycle de vie des certificats certifiés FedRAMP pour les agences fédérales

Keyfactor is proud to announce that our Certificate Lifecycle Automation-as-a-Service (CLAaaS) solution has achieved FedRAMP® “In Process” status on FedRAMP marketplace, marking a significant milestone as the first Certificate Lifecycle Management (CLM) solution with this designation from any vendor. We are actively working towards obtaining a moderate FedRAMP Authorization to Operate (ATO) for U.S. federal agencies in the coming months. 

FedRAMP certification brings several key benefits to federal agencies looking to adopt cloud-based certificate lifecycle management solutions. 

Rationalisation de la passation des marchés

The FedRAMP marketplace simplifies the selection and adoption of cloud services for federal agencies. Once Keyfactor Command CLAaaS achieves full ATO status, agencies will be able to leverage this reusable certification, significantly reducing the time and effort in assessments and procurement. 

Sécurité renforcée et normalisation

FedRAMP provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. Our CLAaaS offering has undergone rigorous validation by the FedRAMP Program Management Office (PMO) and a certified 3rd party assessor, ensuring compliance with the stringent security and risk management standards set by the U.S. government. 

Efficacité opérationnelle et réduction des coûts

Keyfactor’s CLAaaS is a cloud-managed solution that eliminates the need to maintain on-premises CLM infrastructure. It automates manual certificate lifecycle management tasks such as renewals and revocations while making it easier for users to request certificates with role-based access control, approval workflows, and predefined templates.  

Répondre aux défis évolutifs de la gestion des certificats

The landscape of certificate management is rapidly changing, presenting new challenges for Federal Agencies: 

1. Shorter Certificate Lifecycles: Certificate validity periods are decreasing from about a year to potentially just 45-90 days, significantly increasing certificate management overhead. 
2. Large-Scale Certificate Disruptions: Agencies must be prepared for events like certificate revocations or distrusts impacting large portions of their cryptographic assets, like as seen with DigiCert’s mass revocation and Entrust’s distrust designation by Google in 2024. 
3. Post-Quantum Cryptography (PQC): The transition to post-quantum cryptography requires a precise inventory of cryptographic assets, and with NIST’s announcement of standardized PQC algorithms in 2024, agencies need to be prepared for this major transition. Keyfactor CLAaaS automatically discovers and inventories all cryptographic assets across CAs. 

Keyfactor’s CLAaaS addresses these challenges by enabling agencies to efficiently discover, monitor, and automate certificate management at scale, enhancing crypto-agility while saving time and resources. 

La voie à suivre

As we progress towards full FedRAMP Authorization, Keyfactor remains committed to providing federal agencies with a secure, efficient, and compliant solution for certificate lifecycle management. Our CLAaaS offering is poised to revolutionize how government entities handle their digital certificates, ensuring they can meet the demands of an increasingly complex cybersecurity landscape.  

Lisez notre communiqué de presse et découvrez Keyfactor pour le gouvernement fédéral tout en restant à l'écoute des mises à jour, alors que nous poursuivons notre voyage vers un ATO FedRAMP complet.