マイクロソフト月例パッチ（Microsoft Patch Tuesday）- 2018 年 5 月

May 10, 2018, 5:11 pm

≫ Next: アプリに偽装したマルウェア、Google Play ストアで発見

≪ Previous: Google Play ストアに繰り返し登場し、Google のアイコンを悪用する悪質なアプリ

今月は、67 個のパッチがリリースされており、そのうち 21 件が「緊急」レベルです。

↧

アプリに偽装したマルウェア、Google Play ストアで発見

May 10, 2018, 5:27 pm

≫ Next: Scan4You の主犯、米国の法廷で有罪に

≪ Previous: マイクロソフト月例パッチ（Microsoft Patch Tuesday）- 2018 年 5 月

問題のアプリ 38 種は、デバイスで存在を隠しながら悪質な機能を実行します。

↧

Scan4You の主犯、米国の法廷で有罪に

May 20, 2018, 5:12 pm

≫ Next: 12 Things to Look for in a Managed PKI Solution, Part 2

≪ Previous: アプリに偽装したマルウェア、Google Play ストアで発見

シマンテックは、アンダーグラウンドのマルウェアスキャンサービスに関与した 2 人の起訴に協力しました。

↧

12 Things to Look for in a Managed PKI Solution, Part 2

April 3, 2018, 3:44 pm

≫ Next: VPNFilter: 破壊的な機能を持ち、ルーターを狙う新しいマルウェアが出現

≪ Previous: Scan4You の主犯、米国の法廷で有罪に

Publish to Facebook:

This is the second part of a four-part series covering twelve fundamentals for choosing a managed PKI solution, and questions to ask in the buying process.

In Part 1, we shared four key differences between managed public key infrastructure (PKI) providers. This week, we will discuss three features of Symantec Managed PKI Service, Powered by DigiCert®[1], that provide your organization with the ability to easily administer and deploy your managed PKI while keeping costs low. Whenever an organization deploys a technology like PKI, the total cost of ownership must be considered. The Symantec Managed PKI Service offers customers tools and features to maximize the use of the PKI and minimize the total cost of ownership.

5. System Management

While most managed PKI offerings provide customers with a baseline set of features, it’s important to review them and their potential impact on your business. Some providers, like DigiCert, give the user complete control of the system and allow you to use the certificate authority to meet current and future use cases. The system is designed to let your organization adapt the service to any situation in your enterprise.

Other providers take a different approach and only offer you a limited set of functionalities determined at the time the certificate authority is created. If your organization needs to make a change to the functionality or features, then you must work through a support organization and potentially pay additional fees. This leads to an increase in overall cost, delays in deployment, and a general frustration with certificate based technology.

6. System Administration

When administering a managed PKI solution, you need a streamlined and user-friendly web interface that provides a simple yet powerful workflow for managing certificates. Symantec Managed PKI offers customer a broad set of base certificate templates to address many use cases. DigiCert includes certificate templates for users, devices, Mobile Device Management (MDMs), and many other use cases. These templates can be used in their default state or customized through a web interface that provides instructions, recommendations, and error-checking.

All of this results in easy administration and rapid certificate deployment. These features take the complexity out of PKI deployments and allow the customer to focus on meeting their use cases. Other managed PKI vendors do not have such an easy-to-use interface. Often, these other systems require you to have extensive PKI knowledge to know how to use the system and implement basic certificate types to meet standard use cases. These organizations require expensive PKI personnel with specialized knowledge to operate the system which increases the total cost of ownership.

7. Ease of Deployment

Once an organization is set up to use a managed PKI service, they need to deploy certificates in a timely and efficient manner. Symantec Managed PKI provides you with multiple types of user registration methods that are built into the system. No custom coding or special systems required by the end user. User registration and authentication features are built into the DigiCert workflow.

In addition, Symantec Managed PKI offers an easy-to-deploy auto-enrollment server that can seamlessly enroll Windows domain users and computers for certificates. Often this server is deployed by the customer in a short amount of time and without issue. Many other managed PKI vendors do not offer tools to ease deployment. For example, one of our major competitors does not provide built-in workflows for all certificate types, supports limited authentication options, and you cannot install the auto-enrollment server - it requires a professional services engagement which increases cost and delays deployment time.

Questions to Ask

When selecting a managed PKI, here are some questions you might want to ask your managed PKI provider regarding administration and certificate deployment:

1.What certificate templates are included with the CA?

2.How do I enable new features on the CA? Does it require Support or can a customer do it?

3.Is there built-in certificate creation workflows?

4.What types of certificate registration options are supported?

5.How do you support auto enrollment in a Windows environment?

Our next post, Part 3, in this series will cover how DigiCert provides usability and ease of use for end users with its managed PKI service.

[1] *On October 31, 2017, DigiCert, Inc. acquired from Symantec Corporation the business of providing and supporting Symantec’s Website Security and PKI products and services.

↧