GeoTrust Strong Authentication Solutions True Credentials® Express

Fully-Managed and fast to market Strong Authentication Solution

True Credentials Express offers the same client certificates and management service as True Credentials®, but is designed for enterprises who issue fewer than 1,000 certificates. It provides even the smallest enterprise with total control over who obtains certificates, how they get distributed, how they may be used, and how long they last.

We offer True Credentials Express because we know that certificate lifecycle management is important to any business - even those with hundreds, not thousands, of active certificates.

Delivering Secure Access, Secure Messaging and Secure Web-based Services and Applications True Credentials Express client certificates provide two- factor authentication and the cryptographic functions necessary to encrypt all electronic transmissions so no unauthorised parties can read or understand the transmission. A fully-managed service, it addresses the inherent security risks typically associated with simple password schemes, open email communications and hardware-based authentication solutions without any expensive hardware, infrastructure or set-up costs. True Credentials Express provides a fast and easy way for enterprises to credential users and to deliver these client credentials electronically.

Client credentials can be employed in every enterprise, from finance, insurance and Internet commerce companies to education and government organizations. True Credentials Express provides strong authentication for secure access, secure messaging and secure web services and applications.

• Secure Access. The driving motivation to provide secure access to mission-critical enterprise applications and resources is to increase the efficiency of the workforce, to create a virtual enterprise that brings suppliers and partners in for trusted transactions, and to provide consumers with the confidence that their confidential information is secure. True Credentials Express provides secure access to vital network resources and applications, such as VPNs and web portals, without any special hardware and software requirements.
• Secure Messaging / S/MIME. Secure messaging is about making sure only the intended recipients of email messages can read them. Securing email has not been done extensively because of the difficulty in authenticating senders and receivers and in getting them their certificates. But once certificates are correctly installed, all standard email clients support signing and encrypting to keep communication private and confidential. With a True Credentials Express client certificate installed, email clients and servers continue to work unaltered, but all the intermediate servers, ISPs and networks can store messages without ever being able to read them providing maximum security.
• Web Services and applications. Pressure to streamline business processes and decrease operational costs are forcing enterprises to reconsider the way they do business online. True Credentials Express client certificates can provide the critical security that enterprises need for the all of the parties involved in vendor/partner transactions, including supply chain management, paperless transactions, and other applications over the internet that require fast, secure, and reliable methods to be in place.

How It Works

Certificate management is rapidly becoming the single biggest enterprise security chore. In response, True Credentials Express provides a centralised, web-based administration tool for reviewing, revising and revoking digital certificates. This service also allows administrators to manage certificate content, specify authentication methods, and control lifecycle processes. Advanced recording and reporting features make it easy to monitor certificate activity. Certificate lifecycles can be thought of like this:

Registration

Registration is the first step in the lifecycle of a digital certificate. It is here that enterprise users have requested secure access to applications, and once those requests have been properly vetted, certificates are created. True Credentials Express provides an administrative interface for registering users one at a time, or accepts 'bulk loading' through comma-delimited files. Security administrators can then review, reject or accept these requests through a simple web interface.

Management

The ongoing maintenance of digital certificates can be easily managed through the True Credentials Express interface. Quick access to certificate revocation functions and CRL information are just the start. The administrator may, at any time, review or revoke certificates.

Reporting

A flexible search engine allows the user to build result sets based on certificate attributes, location or other sorting criteria. The subsequent reports may be either summary or detailed. Comprehensive reports can generated to review the enrollment status of registrations or the current status of all issued certificates.