订阅内容

We are pleased to announce the release of Red Hat Certificate System 9.  Supported on Red Hat Enterprise Linux 7.1 and based on the open source PKI capabilities of the Dogtag Certificate System, Red Hat Certificate System 9 provides a robust and flexible set of features to support Certificate Life Cycle Management.  It is able to issue, renew, suspend, revoke, archive/recover, and manage the single and dual-key X.509v3 certificates needed to handle strong authentication, single sign-on, and secure communications.  Red Hat Certificate System 9 incorporates several new and enhanced features, including

:

  • Simplified Installation and Deployment
    • Simplified silent installation by using INI-like configuration files instead of command-line arguments.
    • Instance creation and configuration that can be performed in a single automated operation.
    • Multiple subsystems that can be deployed in a single Tomcat instance.
  • REST Web Service APIs
    • A new set of REST APIs to access various web services of the Certificate System.
    • Java and Python client libraries to allow easier integration with other applications.
  • Key Recovery Authority (KRA) Enhancements
    • KRA has been extended to archive other types of secrets, such as passphrases or symmetric keys.
    • Keys can be archived and retrieved by agents contacting the new KRA REST interfaces directly.
    • KRA can now function as a secure and audited vault for all kinds of secrets.
    • Support for both symmetric and asymmetric ability to generate and archive keys to support server-side key generation for TMS workflows.
  • Support for KRA Transport Key Rotation
    • New KRA transport key rotation feature that allows for a seamless transition between CA/KRA subsystem instances using a current and a new transport key.
    • KRA transport keys can be periodically rotated allowing both old and new transport keys to operate during the time of the transition; individual subsystem instances take turns being configured while other clones continue to serve with no downtime.
  • New Java-based Token Processing System (Technology Preview)
    • Replacement of the Apache HTTPD-based TPS with a Java Tomcat-based TPS.
    • Retention of feature parity with the existing C-based implementation while providing a new user interface for a better user experience.
  • Global Platform 2.1.1 in TPS (Technology Preview)
    • The latest version of Global Platform has been included and supported in the version of TPS in Red Hat Certificate System 9.
    • TPS is now able to provision cards that support newer versions of Global Platform and the latest cryptographic operations.

Additional Information

Although new sales of Red Hat Certificate System subscriptions are limited to North America, all existing Red Hat Certificate System customers, regardless of geography, are entitled to take advantage of the new features in this release.

Please visit the Red Hat Identity Management and Infrastructure page in the Red Hat Customer Portal for more information on this release.


关于作者

按频道浏览

automation icon

自动化

有关技术、团队和环境 IT 自动化的最新信息

AI icon

人工智能

平台更新使客户可以在任何地方运行人工智能工作负载

open hybrid cloud icon

开放混合云

了解我们如何利用混合云构建更灵活的未来

security icon

安全防护

有关我们如何跨环境和技术减少风险的最新信息

edge icon

边缘计算

简化边缘运维的平台更新

Infrastructure icon

基础架构

全球领先企业 Linux 平台的最新动态

application development icon

应用领域

我们针对最严峻的应用挑战的解决方案

Original series icon

原创节目

关于企业技术领域的创客和领导者们有趣的故事