State and local governments and contractors often have a requirement for both an enterprise PKI and interoperability with the Federal government. VeriSign has developed the Non-Federal Shared Service Provider (SSP) PKI to capitalize on the extensive array of technologies, standards and solutions developed by the Federal government and industry to support the Federal PKI.
Multiple Assurance Levels, Interoperability with the Federal PKI
Non-Federal SSP PKI operates at multiple assurance levels defined by the Federal e-Authentication program and achieves interoperability with the Federal PKI through cross-certification with the Federal Bridge Certification Authority (FBCA). It also supports standards being developed by the U.S. Department of Homeland Security for the issuance of First Responder Authentication Cards (FRAC).
Key Features
- A clone of the VeriSign SSP PKI service for Federal agencies that enables technical interoperability with the Personal Identity Verification (PIV) card as defined in FIPS 201.
- Enables certificate issuance at multiple assurance levels: rudimentary, basic, medium, medium-hardware and high assurance.
- Full suite of certificate types to enable security services including: authentication, encryption, digital signature, and physical/logical access control.
- Multiple options for the validation of certificates including Certificate Revocation Lists (CRLs) and an OCSP (Online Certificate Status Protocol) validation service.
- Key Management Service provides a centralized, auditable key storage and archive service for key escrow and recovery.
- Automated certificate issuance and lifecycle management with Microsoft® Windows® and Active Directory®.
- Supports the issuance of First Responder Authentication Cards (FRAC) that comply with Department of Homeland Security requirement for credentials meeting Federal PIV standards.
VeriSign offers a full suite of features and options to tailor the right solution for non-federal entities to mitigate risk and speed time to compliance.
Value-Add Services
| Card Management System (optional) | Designed to meet FIPS 201 workflow requirements and customizable to support FRAC, other identity tokens. |
| Outsourced Authentication (optional) | VeriSign verifies customers, buyers, and sellers for certificate issuance with proven, audited practices. |
| Professional Services | Expert knowledge of government technical and policy requirements critical to help ensure timely and compliant deployments. |
Why VeriSign?
- For over ten years VeriSign has been the leading provider of managed PKI services to government and commercial organizations.
- VeriSign was the first certified SSP and the first vendor to receive FIPS 201 SSP certification.
- The VeriSign highly available and scalable Internet infrastructure helps ensure the availability of agency mission-critical SSP PKI services.
|
Worldwide Sites
