SafeSign Management Server

SafeSign Management Server One proven platform for efficient full-lifecycle management of digital identities

SafeSign Management Server is an identity management system that enables organizations to efficiently issue and manage a large variety of identity credential technologies from a single platform. Using this browser-based application, administrators can define user roles and access rights in accordance with policies, issue credentials, and perform a wide range of tasks in less time, thereby reducing the administrative burden while eliminating unnecessary barriers to access. SafeSign Management Server integrates with PKI infrastructure, supports multiple issuing models (individual, batch, self-service, etc.) and can integrate with your existing user directories to facilitate registration. Designed to support full lifecycle management of digital credentials, the SafeSign Management Server supports customized workflows and enables organizations to centralize identity management, enforce policy effectively, and streamline auditing—while minimizing the time and cost of routine administration.

Benefits of SafeSign Management Server

• Centralize credential management to ensure greater administrative consistency and efficiency.
• Consolidate and simplify issuance and management of strong authentication technologies to reduce administrative cost and complexity.
• Enforce administrative processes to improve business governance and reduce compliance failure risk.
• Address a broad range of requirements through secure customization of workflows and policies.

SafeSign Management Server Features

Security Features 

• An extensive range of issuance, post-issuance, and administrative functions enables organizations to manage the full lifecycle of identity credentials, reducing the complexity and cost of enforcing security policies.
• Support for a range of digital credentials and token devices enables organizations to choose the technologies appropriate to their applications, including PKI cards, soft certificates, USB tokens, and handheld tokens, contact and contactless cards, and biometric technologies.
• Authorized individuals can customize workflows that define tasks and enforce business policies; an intuitive web-based interface then guides users through issuance and management tasks step by step, an approach that simplifies administration, reduces training costs, and frees security specialists from routine administration.
• Flexible support for a range of printers and encoders enables issuers to choose their preferred technology for physically printing cards and personalizing contact and contactless chip data.

Operational Features

• One product supports multiple issuance models, including individual, batch, bureau, and end-user self service, minimizing administration and training costs.
• Integration with a range of certificate authorities (CAs) enables users to work with multiple CAs at the same time.
• The ability to leverage existing card infrastructures and user directories for registration of users streamlines deployment and minimizes the need for training.
• A secure logging database and integrated reporting streamline auditing and compliance.

SafeSign Management Server Specifications 

Supported Server Platforms

• Microsoft Windows 2000
• Windows 2003

Supported Client Platforms

• Microsoft Windows NT, 2000, XP

Supported Web Browsers

• Microsoft Internet Explorer 5.5, 6.0

Supported Web Servers

• Microsoft Internet Information Server (IIS)

Supported LDAP Directories

• Critical Path
• DCL
• iPlanet/Sun-One
• Lotus Domino
• Microsoft Active Directory
• Nexor 

Supported Databases

• Microsoft Data Engine
• Microsoft SQL Server 

Supported PKI Certificate Authorities

• Cybertrust
• Certificate Authorities Entrust
• GlobalSign
• Microsoft
• RSA
• Verisign

Supported Smart Cards and USB Devices

• Thales SafeSign PSM card
• ActivCard, Athena Smart Card Solutions,
• Austria card, Axalto/Schlumberger,
• Datakey, Gemplus, Giesecke & Devrient,
• IBM, Oberthur, ORGA, Rainbow, Siemens 

Supported Card Platforms

• Proprietary Crypto Chip Cards
• iClass
• Java Card
• MIFARE
• Open Platform

Supported Standards

• ASP, 3-DES, COM+, Global Platform,
• HTTP, HTTPS,
• Identrus, JCOP, LDAP, Mifare,
• OCSP, ODBC, Open Platform,
• PKCS #7, PKCS #10, PKCS #11,
• RSA, SHA-1, SQL, SSL, X.509, XKMS, XML

Supported Card Printers

• Datacard - SP35, SP55 and Magna Series
• Fargo - DTC 500 Series and HDP 800 Series

Supported Authentication Servers

• SafeSign Authentication Server
• Other third party authentication servers – more information available on request

Supported Hardware Security Modules (HSM)

• Thales SafeSign Crypto Module