Les mises à jour des sites SignServer et EJBCA améliorent la flexibilité du déploiement et la préparation à la technologie Quantum.

We’re excited to announce the general availability of EJBCA 8.2 and SignServer 6.2, including updates to the software appliance, hardware appliance, and cloud editions. These releases highlight our commitment to moving the industry towards post-quantum readiness as well as providing our customers PKI and signing how and where they need it. 

Voici quelques points forts de ces publications :

• HSM support for post-quantum issuance and signing: Continue issuing certificates and signing artifacts in your test environments, now with Thales Luna 7 or TCT HSM, with more to come.
• Registration Authority (RA) Chaining: Want an RA inside your network to work with your EJBCA SaaS or PKI as a service deployment? Now you’ve got it. 
• Automated certificate clean-up: Clear up extra database space by getting rid of expired certificates automatically based on a configurable window.
• Expanded SignServer REST API: Automate configuration and fully remote control with extended methods and endpoints for SignServer workers. 

Examinons de plus près les nouvelles améliorations apportées par EJBCA 8.2 et SignServer 6.2.

Support HSM pour la délivrance et la signature des CQP

The requirement for post-quantum certificates and signing is only getting closer. Now is the time to prepare, not panic. The final post-quantum algorithms are still going through their final approvals, making now a perfect time to test them in your lab environments and ensure a smooth transition when deadline requirements hit. 

Dans EJBCA 8. 0 et SignServer 6 .0, nous avons introduit la prise en charge de l'émission et de la signature post-quantique, afin que nos clients puissent commencer à tester leur environnement de laboratoire. Aujourd'hui, nous avons franchi une étape supplémentaire en permettant l'intégration avec un HSM quantique pour la génération de clés. Il s'agit d'une nouvelle étape sur notre feuille de route visant à fournir des solutions prêtes pour le quantique dans un monde post-quantique.

This makes now a perfect time for you to get started if you’ve yet to look at testing post-quantum algorithms.  

Flexibilité accrue grâce au chaînage RA

Having a Certificate Authority (CA) or full PKI in the cloud has a ton of great benefits. But sometimes you want that extra layer of security on your enterprise network by only allowing communication to be initiated internally. For our cloud-hosted customers, if you wanted to interact with your Registration Authority (RA), you had to use API calls. Now with EJBCA 8.2 and RA Chaining, you can utilize a full RA from within your network, giving you both more functionality and security when connecting to your external services.

Nettoyage automatisé des certificats

With the volume of certificates issued from your PKI, the size of your database can grow quickly. Now, you can purge your database of expired certificates that no longer need to be audited or tracked. Simply turn on clean up, specify the age you want expired certificates to be deleted after, and watch EJBCA free up your space. 

Extension de l'API REST de SignServer

Lastly, we’ve also expanded the REST API for SignServer. Now you have even more granular remote control of your SignServer workers. The new methods can typically be used for automating SignServer setup as part of DevOps processes. 

Pour en savoir plus sur les versions, veuillez consulter le portail de documentation.