# Presentation: 288217

## SETECS OnePKI 

**SETECS Corporation**** **
***SETECS ****OnePKI*** ******
**March 14, 2002**

## SETECS Security Products : 

**             ****(CA servers, clients, and APIs)**
**2.   *****OneDirectory *****– X.500/LDAP system **
**             ****(X.500/LDAP servers, LDAP client, security extensions)**
**3.   *****OneCARD***** – System for file/Java smart cards**
**             ****(SC administration, SC applications, PC applications, SC APIs)**
**4.   *****OneNET***** – Network security system**
**             ****(Secure E–mail, Secure WWW – SSL and forms)**
**5.   *****OneJAVA***** – Security system for Java applications**
**             ****(Security client, server and secure Java objects/methods)  **
**6.   *****OnePlatform ***** – Security development platform**
**             ****(C/C++, Java, smart card APIs, protocols and components)**** **

**SETECS Security Products :**** **

## OnePKI  – Characteristics : 

**Several PKI clients – native client, thin*****–*****, thick*****–*****client, Java client**
**Full RFC 2459 certificate and CRL profiles (all extensions)**
**All certificates and CRL functions (CMS – RFC 2510)**
**Creation and verification of certificate paths **
**Multiple policies (high, medium, basic) – compliant with **
**       ****FBCA Medium/High and DoD Class3 / Class 4 policies **
**Private cert profiles (VISA/MasterCard) and financial PKIs **
**Combined with directories and smart cards**
**Some additional features   . . .**

*OnePKI*** ******** ****– Characteristics :**** **

## OnePKI – Full CA Infrastructure

**Web and Other**
**Servers**** **

**User**

**User**

**User**

## Slide 5

## Slide 6

## Slide 7

## Slide 8

## Slide 9

## Slide 10

## Slide 11

## Slide 12

## Slide 13

## Slide 14

## Slide 15

## Slide 16

## Slide 17

## Slide 18

## Slide 19

## RootCertificate.der

**RootCertificate.der**

**RootCertificate.der**

## RootCertificate.der

**RootCertificate.der**

**RootCertificate.der**

**OtherRootCertificate.der**

**ForwardCertificate.der**

## RootCertificate.der

**RootCertificate.der**

**RootCertificate.der**

**OtherRootCertificate.der**

**ForwardCertificate.der**

**OtherRootCertificate.der**

**BackwardCertificate.der**

**ForwardCertificate.der**

## RootCertificate.der

**RootCertificate.der**

**RootCertificate.der**

**OtherRootCertificate.der**

**ForwardCertificate.der**

**OtherRootCertificate.der**

**BackwardCertificate.der**

**ForwardCertificate.der**

**CrossCertificatePair.der**

## RootCertificate.der

**RootCertificate.der**

**RootCertificate.der**

**OtherRootCertificate.der**

**ForwardCertificate.der**

**OtherRootCertificate.der**

**BackwardCertificate.der**

**ForwardCertificate.der**

**CrossCertificatePair.der**

**BackwardCertificate.der**

## RootCertificate.der

**RootCertificate.der**

**RootCertificate.der**

**OtherRootCertificate.der**

**ForwardCertificate.der**

**OtherRootCertificate.der**

**BackwardCertificate.der**

**ForwardCertificate.der**

**CrossCertificatePair.der**

**BackwardCertificate.der**

**CrossCertificatePair.der**

## Slide 26

## OnePKI – Full CA Infrastructure

**Web and Other**
**Servers**** **

**User**

**User**

**User**

## Slide 28

## Slide 29

## Slide 30

## Slide 31

## Slide 32

## Slide 33

## Slide 34

## Slide 35

## Slide 36

## Slide 37

## Slide 38

## Slide 39

## Slide 40

## Slide 41

## Slide 42

## Slide 43

## Slide 44

## Slide 45

## Slide 46

## Slide 47

## Slide 48

## Slide 49

## Slide 50

## Slide 51

## Slide 52

## Slide 53

## Slide 54

## Slide 55

## Slide 56

## Slide 57

## Slide 58

## OneDirectory – X.500 / LDAP System

***OneDirectory *****– X.500 / LDAP System**

**Servers /**
**Administrators**

**Users**

**Border**

**Internal**

**CRL**

**Certs**

## Slide 60

## Slide 61

## Slide 62

## OnePKI  – Additional Features : 

**Simple and easy customization**
**Encrypted classes – fully resistant against viruses/worms**
**Verification of completeness before activation **
**Invalid incoming messages/requests rejected  **
**All FBCA “membrane” test requirements  **
**FBCA Medium/High and DoD Class3 / Class 4 policies **
**Combined with directories and smart cards**

*OnePKI*** ******** ****– Additional Features :**** **

## OnePKI  – Suggestions / Phases : 

**Download, install and test (SETECS Test CP) **
**Adopt SETECS CP and CPS (Basic CP)**
**Run as a small pilot (Secure E–mail, Secure Web)**
**Cross–certify with FBCA and run full scope  **
**Extend other applications with PKI**
**Move to Medium/High CP (****SC and Directory functions)**** **
**Scale (users), extend (applications), expand (functionality)  **

*OnePKI*** ******** ****– Suggestions / Phases :**** **

## SETECS OnePKI 

**SETECS Corporation**** **
***SETECS ****OnePKI*** ******
**E-mail: sead @ dsv.su.se**
**Cell: (301) 648-8599**
**Phone: (202) 994-5506**
**http://www.setecs.com/DL/Download.htm**
**March 14, 2002**