Disclaimer: This information comes from sources that cannot be verified. As such, make no assumptions about its completeness or accuracy. We endeavor to keep this information up to date as much as possible. Feel free to send comments/ updates to the Security News Editor.

October 27, 1997, Section: Test Center:Internet Security Tools

Entrust/WebCA

Entrust/WebCA allows resellers to issue Web certificates for Web browsers and servers. The certificates are used to validate the authenticity of the entities and then encrypt the transmission using Secure Sockets Layer (SSL) protocol. The product enables resellers to deploy certificate authority (CA) servers that issue X.509 public-key certificates for secure Web sessions. These certificates are platform-independent and require no more than an SSL-compliant browser and Web server. A single CA can manage up to 5,000 certificates at multiple sites and on multiple servers.

Issuing a certificate consists of a three-step process of application, approval and retrieval. The application process is when a Web browser or server in need of a certificate requests one from the CA. The CA then decides whether or not to approve the client for certification using criteria the reseller has defined. If the request is approved, the CA issues an X.509 Web certificate that is installed into the requester's browser or server.

The product comes with Entrust/Directory for certificate management as well as sample certificate application forms, CGI scripts and HTML pages that assist the reseller in deploying the technology.

The administrator interface is HTML-based, allowing resellers to remotely control Entrust/WebCA. Administrator access can be restricted by user, location and physical token. Resellers can use wild-card searches to view user status, add users in bulk or revoke, as well as renew or modify certificate properties, such as enlarging the certificate lifetime.

The technical skills required to install and use Entrust are fairly high, as the administrator must know how to use the Web server to generate the certificates. A good knowledge of the site's infrastructure is also required.

Entrust could use some overall smoothing:The software is not flawed, but it is quirky. Its point-and-click browser-based interface is simple enough to navigate, and using it is more like a point, click and tweak-afterward type of affair.

---

Entrust/WebCA

Price:$500 for 500 certificates

Warranty:None

Distributors/Integrators:Distributes to systems integrators and VARs

Authorization Requirements:Requirements include references, contracts, minimum-volume commitments, staff training and support qualifications

Model Number:1.01

Entrust Technologies

Ottawa, Ontario

(613) 247-3411

(888) 690-2424

www.entrust.com