primeID DISCOVER

primeid DISCOVER synchronizes the inventory and status information of all certificates from the issuing sources (CAs) and all directories (databases) within the organization. In addition, a Network Certificate Scanner is available to scan any specified IP address / port range (network segment) for SSL/TLS certificates from any unknown sources, including public trust CAs. This is an agent-less technology for non-intrusive and easy operation. Combined, this provides a 360° view on the state of all your digital identities.

primeid DISCOVER records the organization’s certificate inventory and it can trigger configurable notifications, for example upon expiry of a certificate. It provides comprehensive reports which may serve for compliance purposes. Powerful filters can be used to focus on specific subsets of the certificate inventory.

Mismatches in certificate attributes and entire entities, between the different data repositories, are automatically detected and reported, including the change history of the attributes and entities in question. Inconsistencies at this level can be an indication of a misconfiguration or a malicious threat. primeid DISCOVER helps to keep all digital identities consistent and secure and thereby contributes to the security operations of an organization, and to its regulatory compliance. 

primeid DISCOVER does not actively manage the certificate lifecycle, as certificate automation workflows and protocols, such as ACME or EST, are provided by all modern PKI implementations. To complement these, primeid DISCOVER offers comprehensive REST APIs, for integrating certificate lifecycle events into ticketing systems and business processes automation solutions.