Key Manager

The ADSS Key Manager module is used by operators to:

Generate key pairs for various purposes in either Software or Hardware Device (HSM, Smartcard, USB Token).
Define key templates for keys generated in hardware crypto sources.
Define certificate templates.
Import keys and certificates from PKCS#12/PFX containers.
Import public keys and certificates from hardware devices, Azure Key Vault, AWS Cloud HSM and/or MSCAPI.
Export software keys and certificates in PKCS#12/PFX format.
Generate self-signed certificates.
Create certificate purposes.
Create certificate templates for CV certificates used in E-Passports.
Generate CVCA and DVCA certificates for E-Passports.
Get public keys certified through the ADSS Server Local CA.
Enable automatic certificate renewal.
Generate PKCS#10 (Certificate Signing Requests) for public keys to be certified via external online or offline CAs.
Create Certificate Groups for certificates held in configured hardware crypto sources and MSCAPI.
Specify a default Distinguish Name to use in certificates and certificate request messages.
Define automated alerts to warn about certificate expiry.
Destroy keys that are no longer required.

The following image shows the Key Manager sub-modules, details of which are given in the next sections: