DigiCert PKI Platform Reviews

They provide a digital certificate management solution tailored to the lifecycle management needs of banks. From the customer's perspective, their primary requirement is a solution for digital certificate management. 

This encompasses both internal and external certificate management needs. Currently, they rely on Microsoft's Active Directory Certificate Services (ADCS) for certificate management, but they are exploring alternatives for enhanced functionality. The focus is on the efficient management of certificates, whether for local purposes or to facilitate secure communication for external entities.

I emphasize the importance of automation in Wi-Fi management, particularly in tasks like certificate renewal. The requirement extends to the ability to generate new certificates from a local server within the data center. There is a need to establish a new server for local certificate issuance which highlights the desire for automation in the deployment process. The emphasis lies on leveraging automated solutions to streamline these operations effectively.

The customer finds value in adopting a platform from Jira, particularly for the ease it brings to their processes, both for on-premises operations and batch processing. Their objective is to create a new customized server specifically designed for generating certificates. This server is intended for the generation of certificates, emphasizing that it is not meant for free domain replacement. The platform of choice for this purpose is Digital One, a product that offers full customization and aligns well with the customer's preference for tailored solutions. 

The process of certificate issuance from Microsoft's AB involves renewal or replacement every five years. However, an issue arises in that this particular certificate requires renewal annually instead of the standard five-year cycle. The challenge is attributed to personnel changes, where an administrator responsible for the process resigns within the five-year period. To address this, we seek an automated solution that operates seamlessly with a single sign-on approach, eliminating the need for user IDs or passwords. The automation involves approval and subsequent deployment without complexities. Being a partner of DigiSet, we rely on the implementer for support in service deployment, installation, and resolution of any issues that may arise.

I have been using Digicert PKI Platform.

It is stable. I would rate the stability 9 out of 10. 

The scalability and automated autoscaling feature are significant advantages of the platform. When there is a need to scale up, particularly with the introduction of new VMware instances, the process is swift and efficient. For instance, when dealing with a hundred instances, the installation of certificates on the Digital Storage platform is accomplished seamlessly within one hour, thanks to the automation capabilities in place.

Integrating and deploying certificates on-premises is a straightforward process, facilitated by the presence of an engineer from the user side. The ease of deployment is particularly beneficial when dealing with Digital Storage. We note that if a customer encounters challenges in integrating with complex software or intricate schema architectures, the communication process becomes more difficult, often requiring emails or direct conversations. The user appreciates a seamless and positive experience when Digital Storage handles the deployment for their customers. From the project initiation to its completion, it takes approximately two months. The delay is attributed to the preparation of HFM for the safer buffer key on the IHM, specifically within the Alice framework. The process involves collaboration with three departments within the banks, namely the Keeso department, the infrastructure department, and the integration team. These teams work collectively on aspects such as integration with local certificates, interaction with vendors, and the overall deployment process.

I would rate the price a seven out of ten. 

I would overall rate the product 9 out of 10. 

We primarily use this product to maintain the organization's security. Using the basic details for the end-user, the certificate signing requests were created and PKI servers (sub-ca) would issue the certificate based on CSR. That certificate would then be used further for communications based on SSL or the identity of that end-user.

Moreover, the sub-ca and root-ca automation can be done using PowerShell, Ansible, and shell scripting.

The public key infrastructure certificates issued by the PKI servers helped me set up good client-server authentic communications.

The most valuable feature is the communication based on PKI certificates.

From an automation perspective, PKI is a bit of a debatable topic and can be improved as time demands.

I have been using DigiCertPKI for almost a year.

This is a stable platform.

It's highly scalable with the network.

I didn't find much support from Microsoft for the automation features.

Customer service and support issues are not a concern with Microsoft.

Positive

Alternatives could be PSPKI (the PowerShell PKI module).

Setup is the real problem for beginners. For example, the CRLs will be complex for people just starting with it.

The ROI was pretty high with this product.

This solution won't cost much, as this would be free with the licensing from Microsoft. It would cost you the same as a server setup or dedicated VM with an AD server.

I did not evaluate other options because this client had specific requirements.

In summary, this is a good product but the automation can be improved.