Mobile Suite - Enterprise - Architecture

The Enterprise Version adds to the Mobile Suite user and certificate management as well as roll-out mechanisms. The central engine of the Enterprise version is the Security Broker. The Security Broker runs on an Application Server and needs a database for the Security Repository. All data is safely stored there.

For user and certificate management the Security Administration (RCP) is enhanced with adequate Plug-Ins. Connection to the Security Broker is done via Web Service technology. The Broker so centrally provides all Enterprise functionality which is controllable via RCP.

An internal user administration is integrated and connected with existing Meta directory via interfaces. Import and synchronization tools enable the combined administration of users from different sources.

A complete Public Key infrastructure with internal CA is integrated and certificates may be administrated at the push of a button. Besides internal CA external CA and Trust Center may easily be connected (via standard protocols). Management (Creation/Renewal/Cancellation) is done within CORISECIO administration. Additionally existing Key Container (P12) of any issuer may easily be imported. Email is an easy way of distribution for the certificates. Certificates and the transportation password are sent automatically to the user’s mobile device. Certificate installation is started automatically upon receipt of the email.

Besides the Broker a Portal Plug-In is available for distribution of certificate and installation packages. Installed in the in-house Portal, this allows protected access for mobile users. Besides central issuing (by the administrator) CORISECIO so provides the possibility for the user to process the key request. After authentication the certificate request is done from the mobile device at the push of a button. The portal component verifies the authorization and issues a certificate via the Security Broker (resp. from the integrated/connected CA). Also the software distribution may be done via the portal component. The administrator sets up/imports the user, defines the software to be installed as well as the Security Policy – the user accesses the portal (e.g.. via Web Browser) and receives all software and requests his certificate.