vSEC:CMS on AWS

The vSEC:CMS on AWS is an innovative, easily integrated and cost-effective Credential Management System (CMS) that will help you deploy and manage credentials within your organization. vSEC:CMS will change your views on how to manage the lifecycle of physical and virtual credentials. Organizations can run vSEC:CMS in public clouds, private clouds and hybrid clouds. Versasec is the most trusted IT solutions provider in the identity and access management (IAM) space. We make it easy for organizations of all sizes to deploy smart cards using our innovative smart card management solutions.

Vendor Independent

vSEC:CMS is fully functional with minidriver enabled credentials such as smart cards, USB tokens and virtual smart cards including Windows Hello for Business (WHfB) and it streamlines all aspects of managing credentials by connecting to enterprise directories, certificate authorities, physical access control systems, email servers, log servers, biometric fingerprint readers, PIN mailers… the list goes on. With vSEC:CMS organizations can issue credentials to employees, personalize the credentials with authentication credentials and manage the lifecycle of the credentials – directly from the cloud.

vSEC:CMS Connectors

Secure

A cornerstone of vSEC:CMS is security, all sensitive data and keys are secured using hardware. Operators of the system are authenticated using two-factor authentication and all usage is securely audited for full traceability.
The main task of a CMS is to securely connect user identities (credentials) into an enterprise systems and maintain this connection throughout the lifecycle of the credential. That implies the need of secure communication with several external systems.

Demonstration and Free Consultation

You can schedule a demo or contact our Versasec team for a free consultation.

Instant Setup!

It’s easy to get started and you can have the most common configuration (Windows Credential Logon) set up in minutes instead of days following our step-by-step tutorials. Once you have the initial use case configured you can build from there adding: User Self Service, Remote Operators and support for other secure devices including Virtual Smart Cards and Windows Hello for Business (WHfB). We support many different use cases; configuration options and our feature set are vast.

Use Case Guide: Windows Credential Logon

We will guide you through the initial setup all the way to you issuing and managing the lifecycle of your secure devices. Follow this guide on our Support Portal: Windows Credential Logon
Note: The PKI used in this example use case will be an MS CA. Other PKIs are also supported.

Documentation

Complete Documentation is found on our Support Portal

Product News:

Meet vSEC:CMS 6.12 – New Accelerated Transition to Phishing-Resistant Passkeys

  • Presenting Versasec FIDO2 Enterprise: FIDO2 Management features for FIDO2 device-bound passkeys. New management tasks include PIN unblock, allowlist, reset protection, and more. 
  • Microsoft Entra ID FIDO2 orchestration: Versasec and Microsoft’s longstanding partnership has culminated in a collaborative solution that enables enterprises to leverage the powerful capabilities of FIDO2 device-bound passkeys, along with the added benefits of comprehensive life-cycle management, centralized control, and auditability.
  • Management of FIDO2 security devices over NFC is now available. Offers an option for those wanting to combine physical access and FIDO2.
  • Added to the Versasec supported credentials list
    • Thales SafeNet eToken Fusion NFC PIV with FIDO2 Enterprise Features and PIV compatibility.
    • Thales SafeNet IDCore 3121 FIDO – A contactless Smart Card for physical access and FIDO2
    • Thales SafeNet eToken Fusion FIPS, a United States government-certified token and 
    • Thales SafeNet eToken FIDO usb c 
    • Token2 PIN+ FIDO2 Security Keys series from new technology partner Token2. 
  • Now supporting the latest Yubico YubiKey firmware: 5.7.
  • Adding a new HSM technology partner, Fortanix. We now support the Fortanix FX2200 Series.
  • User improvements for multi-credential use case environments.
  • Expanded integration with Entrust Identity as a Service (IDaaS): FIDO2 security device issuance for existing users and security device re-issuance.
  • Support for the ObjectSID attribute has been added for our integration with KeyFactor EJBCA.

vSEC:CMS Suite

More information about the complete vSEC:CMS product suite

Migrate to vSEC:CMS

vSEC:CMS S-Series includes upgrade wizards that enables quick and simple upgrade paths from third party credential management systems.

Check out the details on how to upgrade from:

Resellers

The product can be purchased from authorized vSEC:CMS integrators and resellers, via our partners reseller network or contact Versasec directly to let us help you find the best way forward.

Videos

The vSEC:CMS video content can be found here.

Supported Credentials

Versasec strives to support as many credential types as possible in all of Versasec’s products. We support PIV, PKI, Virtual, Physical Access, Logical Access, and FIDO/PIV, and FIDO only credentials. Versasec does not lock you in to one provider, we are credential-agnostic. The number of supported credential types is continuously increasing with every new product version. If you are using a credential that is not on the list, please contact Versasec to check if and when your credential will be supported. Supported Credentials: https://versasec.com/products/supported-credentials/

Product Features

The table below highlights the key features in the Versasec credential management product suites.

 

vSEC:CLOUD

vSEC:CMS

User-Side Credential Operations

Agent-Side Credential Operations

  • Admin Key Change
  • Online Unblock User PIN
  • Offline Unblock User PIN (Operator Side)
  • User PIN Policy Update
  • Certificate Management (pfx or p12 Import, Delete)

Advanced Credential Operations

  • Admin Key Diversification
    from Hardware Protected Masterkey
  • User Fingerprint Policy Update
  • Batch Mode Support
  • Interface Management
  • Custom Data on Credential Management
  • Contact and Contactless (NFC)

Database

  • Credential Repository
  • SQL-based Databases
  • Backup / Restore
  • Multi-forest & Multi-domain

Credential Management System Features

 

vSEC:CLOUD

vSEC:CMS

Product Features

Advanced Management Features

  • User Self-service and MS Credential Provider
  • Key Archive and Key Restore
  • Smart Card Stock Management
  • Granular Operator Permissions and Access Control
  • Card Printing and Batch Processing
  • Photo Capturing
  • Remote Security Device Management (RSDM)
  • Certificate Management using ACME
  • FIDO2 Enterprise Management

Systems Integrations

  • Certification Authorities
  • User Directories
  • Physical Access System (RFID)
  • Identity Providers (IdP)
  • Windows Event Log
  • Mail Server
  • Hardware Security Module (HSM)

Integrations/APIs

Server-Side
  • SQL Database Interface
  • SOAP Helpdesk API
  • SOAP Lifecycle API
  • REST Lifecycle API
Client-Side
  • COM API
  • Web Start API
  • Plugin API
  • Physical Access System (PACS) API
 

vSEC:CLOUD

vSEC:CMS

Licensing/Packaging

Managed by Versasec

 

Subscription

Perpetual Licenses

 

Installation Package

 

NOTE
✔ – The credential is supported by the product.
L – Known limitations – check release notes.
For details about validated middleware/minidrivers check the Versasec support portal or contact us.

vSEC:CMS

Our product suite provides all the software tools to administrate and manage credentials in a secure and convenient way.

Start here

Free Product Trial

Versasec provides enabling IT security products centered on the usage of security devices such as smart cards. Our solutions enable customers to securely authenticate, issue and manage user credentials more cost effectively. Get a free product trial.

Job Openings

We are always looking for new exceptional persons to join our team! Find out more about our job openings.

New to credential management?

SCMS = Smart Card Management Systems
CMS = Credential Management System
Have a look at the Wikipedia definition of a ‘Smart Card Management System’.