Horizon TAP/SSL Certificate Management

Trust Automation Platform (TAP) is EverTrust offering for PKI Automation purposes

It contains the following modules:

• ACME Proxy: an ACMEv2 compliant proxy (SSL certificates)
• F5 SSL Manager: a manager for certificates held in F5 BIG-IP
• Scanner: a network scanner for SSL certificates
• InTune Proxy: a Microsoft InTune Proxy

These modules aim at:

• deploying automatically and securely X.509 certificates
• ensuring that the corporate information system complies with centrally defined rules regarding X.509 certificates
• Automatic Certificate Management Environment (ACME) is defined by the IETF in a set of drafts, that describe a protocol transported over HTTPS for managing SSL certificates
  • Draft 02 is better known as “ACMEv1”
  • Draft 12-18 and RFC 8555 is better known as “ACMEv2”

• Both drafts are implemented (with deltas) in Boulder, the OpenSource CA implemented by the Let’s Encrypt initiative (www.letsencrypt.org) and used as Free, Public CA

• ACME Proxy gives ACMEv2 capabilities to any corporate CA, thus allowing the full and automatic lifecycle management of SSL X.509 certificates, for Linux, MacOS and Windows machines.

Horizon TAP Modules