Beside just throughput and resilience a PKI must be able to adapt in a rapidly changing business environment, enabling rather than restricting new products and services. UniCERT has been designed to scale from the smallest of installations, running on a single machine, to a global infrastructure issuing certificates to tens of millions of users and protecting billions of dollars in transactions. UniCERT is unique in that it is policy driven, allowing it to easily model dynamic business practices. There is no limit to the number of distributed operators that can access the infrastructure.
Operators can have their roles and privileges defined centrally.
These Registrational Domains divide the infrastructure into logical sections. Certification information specific to a particular domain is not made available to other domains. This allows for a UniCERT PKI to be departmentalised. These cards can then be used for disaster recovery and CA cloning. CA Hierarchies - Hierarchies of CAs can be quickly and easily set up.