![\"\"](\"https:\/\/www.proid.cz\/wp-content\/uploads\/2020\/08\/streamline-icon-single-man-hierachy@140x140.png\"){kind=icon}
<\/p>\n[vc_row type=”vc_default”][vc_column][vc_empty_space height=”60″][vc_row_inner][vc_column_inner width=”1\/2″][vc_empty_space height=”40″][vc_column_text]<\/p>\n
[\/vc_column_text][vc_column_text]<\/p>\n
[\/vc_column_text][vc_column_text]<\/p>\n
[\/vc_column_text][vc_empty_space height=”10″][vc_empty_space height=”20″][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_single_image image=”16290″ img_size=”full” alignment=”center” image_hovers=”false”][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”50″][\/vc_column][\/vc_row][vc_row type=”vc_default”][vc_column][vc_row_inner equal_height=”yes” content_placement=”middle”][vc_column_inner width=”1\/6″ offset=”vc_col-xs-6″][vc_single_image image=”4740″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/6″ offset=”vc_col-xs-6″][vc_single_image image=”4735″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/6″ offset=”vc_col-xs-6″][vc_single_image image=”4742″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/6″ offset=”vc_col-xs-6″][vc_single_image image=”4720″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/6″ offset=”vc_hidden-sm vc_hidden-xs”][vc_single_image image=”4741″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/6″ offset=”vc_hidden-sm vc_hidden-xs”][vc_single_image image=”4722″ img_size=”full” alignment=”center”][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”vc_default” bg_type=”bg_color” bg_override=”full” bg_color_value=”#f5f5f5″][vc_column][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text css=”.vc_custom_1682666453663{border-left-width: 4px !important;padding-left: 20px !important;border-left-color: #d8d8d8 !important;border-left-style: solid !important;}”]<\/p>\n
User certificate management module<\/strong><\/span>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text css=”.vc_custom_1682666468525{border-left-width: 4px !important;padding-left: 20px !important;border-left-color: #d8d8d8 !important;border-left-style: solid !important;}”] Module for managing technology certificates<\/strong><\/span>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row anchor=”popis”][vc_column][vc_empty_space height=”70″][vc_row_inner][vc_column_inner width=”1\/6″][\/vc_column_inner][vc_column_inner width=”2\/3″][vc_column_text]<\/p>\n [\/vc_column_text][vc_column_text]<\/p>\n It is crucial for the administrator of an organization’s PKI infrastructure to always keep an overview of the validity of certificates – as they have a limited lifetime. However, they themselves often revoke certificates that they want to invalidate. The problem is that certificate authorities publish information about the validity of certificates late (in the so-called CRL – Certificate Revocation List). The OCSP module replaces this static list and transmits information about revoked certificates in the state they are in at that moment – without delay and therefore with zero error rate.<\/p>\n [\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/6″][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”50″][\/vc_column][\/vc_row][vc_row anchor=”popis2″][vc_column][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space height=”30″][vc_row_inner css=”.vc_custom_1682665971335{padding-top: 20px !important;padding-right: 20px !important;padding-bottom: 20px !important;padding-left: 20px !important;background-color: rgba(221,51,51,0.1) !important;*background-color: rgb(221,51,51) !important;border-radius: 30px !important;}”][vc_column_inner] Imagine an organization that issues and manages a large number of certificates. And at the same time working with certificates issued by external CAs. Electronic signatures, permissions to access premises or web services, and more.<\/p>\n If network administrators want to find out the current status (or validity) of these certificates, they must use a CRL, a file issued by CAs, by default. However, this file is issued in batches (e.g. once a week) and in an unreadable, binary format.<\/p>\n Our OCSP module solves these problems and gives administrators the ability to easily and quickly determine the status of a particular certificate. [\/vc_column_text][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]ProID OCSP is a server that publishes certificate information based on an SQL database. The database stores certificate information, including revocation status. When a client queries the OCSP server, it looks up the revocation status of the corresponding certificates in the database, signs the response with the key and certificate, and sends the information to the client.<\/p>\n The OCSP protocol is standardized. Compliance with standards guarantees interoperability between the server and clients, and each of the communicating parties may be implemented by a different vendor. It can also be run outside of the domain environment and without binding to the MS Windows Server certificate service. The only component that is required for operation is a SQL database with certificate information. [\/vc_column_text][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]OCSP is implemented with features that ensure a high degree of compatibility with commonly used OCSP clients. It can be used in small organizations with a small number of issued certificates as well as in large organizations with a large number of certificates and systems. ProID OCSP is built on a robust foundation with high query throughput.[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]If installed in an environment with a high query load, the plugin can be scaled. If one instance of OCSP is saturated with queries, a second instance can be installed and the load can be distributed between them.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70″][vc_column_text]<\/p>\n [\/vc_column_text][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]OCSP handles individual client requests as web services: in parallel and independently. The separate processing of requests is controlled by the resources of the web server in which the service is hosted. The certificate status information is retrieved from the SQL database. Once the database identifiers for all certificates in a client request are tracked, the OCSP server sequentially queries the data source for the status of each certificate.[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]The result of the certificate status lookup is a completed data structure. The detected differences are automatically written to the activity log.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”30″][\/vc_column][\/vc_row][vc_row][vc_column][\/vc_column][\/vc_row][vc_row][vc_column][\/vc_column][\/vc_row][vc_row anchor=”popis2″][vc_column][vc_empty_space height=”50″][\/vc_column][\/vc_row][vc_row type=”vc_default” bg_type=”bg_color” bg_override=”full” bg_color_value=”#f5f5f5″ el_id=”kontakt”][vc_column][vc_empty_space height=”50″][vc_column_text]<\/p>\n [\/vc_column_text][vc_row_inner][vc_column_inner width=”2\/3″][vc_column_text]\n <\/p> ![\"\"](\"https:\/\/www.proid.cz\/wp-content\/uploads\/2020\/08\/streamline-icon-server-share-1@140x140.png\"){kind=icon}
<\/p>\nInstant overview of the status of digital certificates<\/h2>\n
WHAT PROBLEMS HAVE WE DEVELOPED THE MODULE TO SOLVE?<\/h3>\n
\n
Certificate Lifecycle Management in real time<\/h3>\n
\n[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_single_image image=”1302″ img_size=”full” alignment=”center” style=”vc_box_rounded”][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space height=”70″][vc_column_text]<\/p>\nCertificate Management and ProID OCSP Server<\/h2>\n
\n[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]The data source for certificate information for ProID OCSP is typically the Save and Recovery System (SaRS) database. However, ProID OCSP can also be run on top of another database if the database contains the necessary data.<\/p>\n
\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70″][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\nOSCP compatibility and scalability<\/h2>\n
ProID OCSP server working principle<\/h2>\n
Are you interested in our solution? Contact us<\/h2>\n
\n<\/ul><\/div>\n