{"id":8590,"date":"2020-08-11T11:26:37","date_gmt":"2020-08-11T09:26:37","guid":{"rendered":"https:\/\/www.proid.cz\/produkty\/sars-centralni-databaze-certifikatu\/"},"modified":"2021-06-21T11:32:40","modified_gmt":"2021-06-21T09:32:40","slug":"sars-centralna-databaza-so-zalohou-vsetkych-certifikatov","status":"publish","type":"dt_portfolio","link":"https:\/\/proid.cz\/sk\/produkty\/sars-centralna-databaza-so-zalohou-vsetkych-certifikatov\/","title":{"rendered":"SARS
Centr\u00e1lna datab\u00e1za so z\u00e1lohou v\u0161etk\u00fdch certifik\u00e1tov"},"content":{"rendered":"

[vc_row type=”vc_default” bg_type=”grad” bg_override=”full” css=”.vc_custom_1604325190510{margin-top: -70px !important;}” bg_grad=”background: -webkit-gradient(linear, left top, left bottom, color-stop(0%, #002828), color-stop(100%, #00B49F));background: -moz-linear-gradient(left,#002828 0%,#00B49F 100%);background: -webkit-linear-gradient(left,#002828 0%,#00B49F 100%);background: -o-linear-gradient(left,#002828 0%,#00B49F 100%);background: -ms-linear-gradient(left,#002828 0%,#00B49F 100%);background: linear-gradient(left,#002828 0%,#00B49F 100%);”][vc_column][vc_empty_space height=”100″][vc_row_inner][vc_column_inner width=”5\/6″][vc_column_text]<\/p>\n

SARS
\nCentr\u00e1lna datab\u00e1za so z\u00e1lohou v\u0161etk\u00fdch certifik\u00e1tov<\/span><\/h1>\n

[\/vc_column_text][vc_column_text]Nebojte se ztr\u00e1t vydan\u00fdch certifik\u00e1t\u016f p\u0159i v\u00fdpadku \u010di selh\u00e1n\u00ed certifika\u010dn\u00ed autority. Modul SaRS, z\u00e1kladn\u00ed prvek na\u0161\u00ed security a managementu pro PKI infrastrukturu organizace, uchov\u00e1v\u00e1 v\u0161echny vydan\u00e9 certifik\u00e1ty a v re\u00e1ln\u00e9m \u010dase je automaticky ukl\u00e1d\u00e1. Z\u00e1rove\u0148 ukl\u00e1d\u00e1 v\u0161echna jejich data a umo\u017e\u0148uje rozs\u00e1hl\u00fd data mining.<\/span>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/6″][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”100″][\/vc_column][\/vc_row][vc_row type=”vc_default” equal_height=”yes” content_placement=”middle” bg_type=”bg_color” bg_override=”full” bg_color_value=”#f5f5f5″][vc_column][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text css=”.vc_custom_1603970868569{border-left-width: 4px !important;padding-left: 20px !important;border-left-color: #d8d8d8 !important;border-left-style: solid !important;}”]\"\"<\/p>\n

Modul pro spr\u00e1vu u\u017eivatelsk\u00fdch certifik\u00e1t\u016f<\/strong><\/span>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text css=”.vc_custom_1603970910309{border-left-width: 4px !important;padding-left: 20px !important;border-left-color: #d8d8d8 !important;border-left-style: solid !important;}”]\"\"<\/p>\n

Modul pro spr\u00e1vu technologick\u00fdch certifik\u00e1t\u016f<\/strong><\/span>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space height=”20″][vc_column_text]<\/p>\n

P\u0159edstavte si situaci, kdy zhavaruje va\u0161e certifika\u010dn\u00ed autorita nebo server, na kter\u00e9m provozujete PKI infrastrukturu. Technick\u00e1 porucha, hackersk\u00fd \u00fatok, v\u00fdpadek proudu… M\u016f\u017eete snadno p\u0159ij\u00edt o ve\u0161ker\u00e1 data \u010di \u00fadaje o vydan\u00fdch certifik\u00e1tech. Pr\u00e1v\u011b tento typ v\u00fdpadk\u016f eliminuje Save and Recovery System<\/strong> (SaRS<\/strong>). Modul SaRS kompletn\u011b z\u00e1lohuje v\u0161echny certifik\u00e1ty tak, aby je bylo mo\u017en\u00e9 znovu obnovit a rychle zprovoznit. Nav\u00edc je to hlavn\u00ed koncentr\u00e1tor dat<\/strong> platformy ProID, nad kter\u00fdm b\u011b\u017e\u00ed dal\u0161\u00ed aplikace.<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space height=”30″][vc_row_inner][vc_column_inner width=”1\/6″][\/vc_column_inner][vc_column_inner width=”2\/3″][vc_column_text]<\/p>\n

Pravideln\u00e9 syst\u00e9mov\u00e9 z\u00e1lohy PKI nesta\u010d\u00ed<\/h3>\n

A\u010dkoliv budete pou\u017e\u00edvat pravideln\u00e9 z\u00e1lohov\u00e1n\u00ed, nedok\u00e1\u017eete zabr\u00e1nit v\u0161em ztr\u00e1t\u00e1m dat p\u0159i hav\u00e1ri\u00edch. Jestli\u017ee dojde k hav\u00e1rii certifika\u010dn\u00ed autority, v\u0161echna data vygenerovan\u00e1 od posledn\u00ed z\u00e1lohy budou ztracena<\/strong>.<\/p>\n

[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/6″][\/vc_column_inner][\/vc_row_inner][vc_row_inner][vc_column_inner width=”1\/6″][\/vc_column_inner][vc_column_inner width=”2\/3″][vc_single_image image=”2836″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/6″][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”50″][vc_row_inner css=”.vc_custom_1603804943038{padding: 20px !important;background-color: rgba(221,51,51,0.1) !important;*background-color: rgb(221,51,51) !important;border-radius: 15px !important;}”][vc_column_inner]

Co se m\u016f\u017ee st\u00e1t, kdy\u017e nebudete m\u00edt v okam\u017eiku v\u00fdpadku modul SaRS?<\/h3>\n
    \n
  • Nebudete v\u011bd\u011bt, kter\u00e9 certifik\u00e1ty byly vyd\u00e1ny<\/strong> (chyb\u011bj\u00edc\u00ed certifik\u00e1ty jsou pou\u017e\u00edv\u00e1ny, ale nelze je odvolat; CA m\u016f\u017ee vydat certifik\u00e1t s ji\u017e pou\u017eit\u00fdm \u010d\u00edslem – duplicita s\u00e9riov\u00fdch \u010d\u00edsel).<\/li>\n
  • Nebudete v\u011bd\u011bt, kter\u00e9 certifik\u00e1ty byly zneplatn\u011bny<\/strong> (odvolan\u00e9 certifik\u00e1ty jsou op\u011bt platn\u00e9).<\/li>\n
  • Nebudete v\u011bd\u011bt, kter\u00e9 \u0161ifrovac\u00ed kl\u00ed\u010de byly v CA z\u00e1lohov\u00e1ny<\/strong> (z\u00e1lohovan\u00e9 \u0161ifrovac\u00ed kl\u00ed\u010de jsou ztraceny).<\/li>\n
  • Nebudete v\u011bd\u011bt, kter\u00e9 CRL <\/strong>(seznam odvolan\u00fdch certifik\u00e1t\u016f) bylo vyd\u00e1no<\/strong>.<\/li>\n<\/ul>\n<\/div>[\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”20″][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space height=”30″][vc_row_inner equal_height=”yes” content_placement=”middle”][vc_column_inner width=”1\/2″][vc_single_image image=”1932″ img_size=”full”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

    Rychl\u00e1 obnova dat<\/h3>\n

    P\u0159i obnov\u011b dat certifika\u010dn\u00ed autority je kritick\u00fdm faktorem \u010das<\/strong>: CA vyd\u00e1v\u00e1 CRL na omezenou dobu platnosti. Pokud platnost CRL vypr\u0161\u00ed (a nen\u00ed vyd\u00e1no nov\u00e9 CRL), jsou v\u0161echny certifik\u00e1ty pokl\u00e1dan\u00e9 za ned\u016fv\u011bryhodn\u00e9 \u2013 aplikace, z\u00e1visl\u00e9 na PKI p\u0159estanou fungovat<\/strong>. Pomoc\u00ed syst\u00e9mu SaRS lze obnovu dat CA v\u00fdznamn\u011b urychlit a minimalizovat tak riziko vypr\u0161en\u00ed platnosti CRL.<\/p>\n

    Modul SaRS v re\u00e1ln\u00e9m \u010dase<\/strong> zapisuje do SQL datab\u00e1ze zm\u011bny v datech CA<\/strong> (vyd\u00e1n\u00ed certifik\u00e1tu, archivace \u0161ifrovac\u00edho kl\u00ed\u010de, zneplatn\u011bn\u00ed certifik\u00e1tu atd.).[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”30″][\/vc_column][\/vc_row][vc_row][vc_column][vc_row_inner equal_height=”yes” content_placement=”middle”][vc_column_inner el_class=”vc_col-sm-push-6″ width=”1\/2″][vc_single_image image=”2550″ img_size=”full”][\/vc_column_inner][vc_column_inner el_class=”vc_col-sm-pull-6″ width=”1\/2″][vc_column_text]<\/p>\n

    Pokro\u010dil\u00fd data mining v re\u00e1ln\u00e9m \u010dase<\/h3>\n

    Krom\u011b evidence ud\u00e1lost\u00ed \u010di samotn\u00fdch z\u00e1loh zaznamen\u00e1v\u00e1 SaRS i kompletn\u00ed data certifik\u00e1t\u016f<\/strong>, z\u00e1lohovan\u00e9 kl\u00ed\u010de a CRL. T\u00edm umo\u017e\u0148uje administr\u00e1tor\u016fm v re\u00e1ln\u00e9m \u010dase<\/strong> vyhled\u00e1vat a filtrovat v\u0161echny ulo\u017een\u00e9 informace.<\/p>\n

    Jedn\u00e1 se tedy o st\u011b\u017eejn\u00ed funkcionalitu pro ka\u017edou v\u011bt\u0161\u00ed instalaci PKI infrastruktury a certifika\u010dn\u00edch autorit.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”20″][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text]<\/p>\n

    SaRS jako datov\u00e1 z\u00e1kladna pro syst\u00e9my spr\u00e1vy certifik\u00e1t\u016f<\/h3>\n

    Datab\u00e1ze SaRS je datovou z\u00e1kladnou pro nadstavbov\u00e9 syst\u00e9my spr\u00e1vy certifik\u00e1t\u016f. Na jednom m\u00edst\u011b jsou shrom\u00e1\u017ed\u011bny v\u0161echny certifik\u00e1ty syst\u00e9mu, s mo\u017enost\u00ed rychl\u00e9ho vyhled\u00e1v\u00e1n\u00ed a filtrace.[\/vc_column_text][vc_empty_space height=”20″][vc_row_inner equal_height=”yes” content_placement=”middle”][vc_column_inner width=”1\/2″][vc_single_image image=”4686″ img_size=”full”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]Nad datab\u00e1z\u00ed SaRS se vytv\u00e1\u0159ej\u00ed reporty, ale tak\u00e9 sofistikovan\u011bj\u0161\u00ed slu\u017eby, jako jsou:<\/p>\n

      \n
    • Notifikace bl\u00ed\u017e\u00edc\u00ed se expirace certifik\u00e1t\u016f<\/li>\n
    • Kontrola duplicit certifik\u00e1t\u016f<\/li>\n
    • Automatizovan\u00e1 revokace certifik\u00e1t\u016f, na z\u00e1klad\u011b definovan\u00fdch pravidel<\/li>\n
    • Dopln\u011bn\u00ed metadat k\u00a0vydan\u00fdm certifik\u00e1t\u016fm (nap\u0159. kontaktn\u00ed \u00fadaje spr\u00e1vce serveru, kter\u00fd m\u00e1 b\u00fdt kontaktov\u00e1n v\u00a0souvislosti s\u00a0dan\u00fdm typem certifik\u00e1tu)<\/li>\n
    • Ukl\u00e1d\u00e1n\u00ed informace o potvrzen\u00ed p\u0159evzet\u00ed certifik\u00e1tu<\/li>\n<\/ul>\n

      [\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”20″][\/vc_column][\/vc_row][vc_row][vc_column][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space height=”30″][vc_column_text]<\/p>\n

      Komponenty modulu SaRS<\/h2>\n

      [\/vc_column_text][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]Database Exit Module (Exit.SaRS)<\/b><\/p>\n

      Modul, kter\u00fd je integrov\u00e1n do proces\u016f CA a kter\u00fd monitoruje \u010dinnost CA, zapisuje data CA do SaRS DB a pr\u016fb\u011b\u017en\u011b buduje evidenci SaRS.<\/p>\n

      SaRS Database (SaRS DB)<\/b><\/p>\n

      Datab\u00e1zov\u00e9 \u00falo\u017ei\u0161t\u011b syst\u00e9mu SaRS. M\u016f\u017ee b\u00fdt hostov\u00e1no v\u00a0libovoln\u00e9 b\u011b\u017en\u00e9 rela\u010dn\u00ed datab\u00e1zi (procesy SaRS do DB p\u0159istupuj\u00ed p\u0159es standardn\u00ed rozhran\u00ed ODBC).
      \n<\/b><\/p>\n

      Restore Wizard (<\/b>SaRS.RW<\/b>)<\/b><\/p>\n

      Grafick\u00e1 aplikace pro obnovu dat CA po hav\u00e1rii. Detekuje stav CA a postupn\u011b dopl\u0148uje data z\u00a0evidence SaRS do CA.
      \nV\u00fdsledkem procesu RW je stav dat CA p\u0159ed v\u00fdpadkem.
      \n<\/b><\/p>\n

      SaRS View (SaRS.View)<\/b><\/p>\n

      Aplikace s\u00a0grafick\u00fdm interface, pomoc\u00ed n\u00ed\u017e lze prohl\u00ed\u017eet a konfigurovat evidenci v\u00a0SaRS DB.<\/b>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]Backup synchronization (<\/b>SaRS.BS<\/b>)<\/b><\/p>\n

      Grafick\u00e1 aplikace, kter\u00e1 na \u017e\u00e1dost obsluhy provede jednor\u00e1zovou synchronizaci dat SQL datab\u00e1ze na z\u00e1klad\u011b dat v CA. (Nap\u0159. v p\u0159\u00edpad\u011b, \u017ee by Exit.SaRS n\u011bjakou dobu nebyl funk\u010dn\u00ed anebo pro inici\u00e1ln\u00ed napln\u011bn\u00ed DB SaRS.) Zkontroluje, zda jsou v SaRS DB v\u0161echna data. Chyb\u011bj\u00edc\u00ed data jsou do SaRS DB dopln\u011bna. Data CA z\u016fst\u00e1vaj\u00ed beze zm\u011bny.
      \n<\/b><\/p>\n

      SaRS Archived Key Service (SaRSArKS)<\/b><\/p>\n

      Slu\u017eba (service), kter\u00e1 ukl\u00e1d\u00e1 do SQL datab\u00e1ze archivovan\u00e9 kl\u00ed\u010de, pokud je na CA aktivov\u00e1na separace rol\u00ed. (P\u0159i zapnut\u00e9 separaci rol\u00ed nen\u00ed Exit.SaRS schopen z CA p\u0159e\u010d\u00edst archivovan\u00e9 kl\u00ed\u010de, je nutno je do SQL datab\u00e1ze zapisovat extern\u00ed slu\u017ebou).[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space height=”30″][\/vc_column][\/vc_row][vc_row][vc_column width=”1\/2″]

      \t\t
      [vc_single_image image=”4237″ img_size=”full”][vc_column_text css=”.vc_custom_1607500327184{padding-right: 20px !important;padding-left: 20px !important;}”]Ke sta\u017een\u00ed<\/span>
      \nBro\u017eury a p\u0159\u00edpadov\u00e9 studie<\/strong><\/span>
      \n[\/vc_column_text]