피드 구독

We are pleased to announce the release of Red Hat Certificate System 9.  Supported on Red Hat Enterprise Linux 7.1 and based on the open source PKI capabilities of the Dogtag Certificate System, Red Hat Certificate System 9 provides a robust and flexible set of features to support Certificate Life Cycle Management.  It is able to issue, renew, suspend, revoke, archive/recover, and manage the single and dual-key X.509v3 certificates needed to handle strong authentication, single sign-on, and secure communications.  Red Hat Certificate System 9 incorporates several new and enhanced features, including

:

  • Simplified Installation and Deployment
    • Simplified silent installation by using INI-like configuration files instead of command-line arguments.
    • Instance creation and configuration that can be performed in a single automated operation.
    • Multiple subsystems that can be deployed in a single Tomcat instance.
  • REST Web Service APIs
    • A new set of REST APIs to access various web services of the Certificate System.
    • Java and Python client libraries to allow easier integration with other applications.
  • Key Recovery Authority (KRA) Enhancements
    • KRA has been extended to archive other types of secrets, such as passphrases or symmetric keys.
    • Keys can be archived and retrieved by agents contacting the new KRA REST interfaces directly.
    • KRA can now function as a secure and audited vault for all kinds of secrets.
    • Support for both symmetric and asymmetric ability to generate and archive keys to support server-side key generation for TMS workflows.
  • Support for KRA Transport Key Rotation
    • New KRA transport key rotation feature that allows for a seamless transition between CA/KRA subsystem instances using a current and a new transport key.
    • KRA transport keys can be periodically rotated allowing both old and new transport keys to operate during the time of the transition; individual subsystem instances take turns being configured while other clones continue to serve with no downtime.
  • New Java-based Token Processing System (Technology Preview)
    • Replacement of the Apache HTTPD-based TPS with a Java Tomcat-based TPS.
    • Retention of feature parity with the existing C-based implementation while providing a new user interface for a better user experience.
  • Global Platform 2.1.1 in TPS (Technology Preview)
    • The latest version of Global Platform has been included and supported in the version of TPS in Red Hat Certificate System 9.
    • TPS is now able to provision cards that support newer versions of Global Platform and the latest cryptographic operations.

Additional Information

Although new sales of Red Hat Certificate System subscriptions are limited to North America, all existing Red Hat Certificate System customers, regardless of geography, are entitled to take advantage of the new features in this release.

Please visit the Red Hat Identity Management and Infrastructure page in the Red Hat Customer Portal for more information on this release.


저자 소개

채널별 검색

automation icon

오토메이션

기술, 팀, 인프라를 위한 IT 자동화 최신 동향

AI icon

인공지능

고객이 어디서나 AI 워크로드를 실행할 수 있도록 지원하는 플랫폼 업데이트

open hybrid cloud icon

오픈 하이브리드 클라우드

하이브리드 클라우드로 더욱 유연한 미래를 구축하는 방법을 알아보세요

security icon

보안

환경과 기술 전반에 걸쳐 리스크를 감소하는 방법에 대한 최신 정보

edge icon

엣지 컴퓨팅

엣지에서의 운영을 단순화하는 플랫폼 업데이트

Infrastructure icon

인프라

세계적으로 인정받은 기업용 Linux 플랫폼에 대한 최신 정보

application development icon

애플리케이션

복잡한 애플리케이션에 대한 솔루션 더 보기

Original series icon

오리지널 쇼

엔터프라이즈 기술 분야의 제작자와 리더가 전하는 흥미로운 스토리