Disclaimer:

These links are provided as a free service to those seeking commercial information security products or shareware tools. The fact that a product is listed here is not an indication that Timberline Technologies LLC has evaluated it nor that we recommend it. The descriptive text is generally taken from the vendor's own product literature. The buyer has the ultimate responsibility to ensure that the information security product is suitable for its intended use. Please follow the links to the vendor pages to obtain more detailed information on a particular product. Additional guidance on product selection can be found in the On-Site Security Workshops.

Vendors Please Note: If your product does not appear in this index or if you feel that it has been incorrectly categorized please contact webmaster@timberlinetechnologies.com and the error will be corrected.

Important Note to Surfers: Timberline Technologies takes strict precautions to provide "safe" links. We will not knowingly provide a link to a site with dangerous active content or questionable privacy policies. Nevertheless, we can not guarantee the safety of all links provided. Those who are concerned about browsing securely are advised to use the facilities of BeHidden, safeWeb, Anonymizer or similar service.

Product Name	Description
AccessMaster PKI Manager (Evidian)	PKI Manager interoperates with the leading PKI vendors' products to simplify enterprise PKI deployment, use and administration in synergy with global security policies, even in multi-vendor PKI environments. Advanced features include registration authority, key generation center, interfaces with Microsoft and iPlanet certification authorities (plus Entrust, Baltimore in the near future), E-security Wallet and PKCS plugs-in for web and mail. With AccessMaster PKI Manager, organizations for the first time have a simple, easy-to-use way to issue and manage their own certificates in a centralized manner, consistent with their enterprise security policies.
Assured PKI (e-Lock Technologies)	Provides a Public Key Infrastructure that works seamlessly with MS CryptoAPI and Microsoft Certificate Server greatly simplifying the deployment of PKI technologies for the administrator, network manager and end-user. Assured PKI adds to the Microsoft Certificate system by adding its own e-Lock CSP.
Certificate Management System (Sun/Netscape Alliance)	Provides deployment flexibility to issue, renew, suspend, revoke, and manage X.509v3 certificates. Provides high scalability that is designed to support millions of users. Allows easy management with tight integration of Netscape Directory Server and Console. Offers extensibility and enterprise integration through published APIs and tools.
Certificate Server (PGP)	Provides scalable solutions that grow with your infrastructure.
CyberTrust Enterprise CA (CyberTrust)	Serves the needs of a broad range of users. Whether an organization wishes to control employee or business partner access to sensitive information or allow online payments, the CyberTrust Enterprise CA is customizable to meet the size and scope of each customer's unique requirements. An organization can implement secure business applications within a dynamic and supportive infrastructure that fosters growth. The CyberTrust Enterprise CA is the most cost-effective solution for enterprises of nearly all sizes. Furthermore no expensive client-side software is required.
CyberTrust Global Provider CA (CyberTrust)	A cost-effective and flexible approach to manage the deployment of your certificate-based systems. The Global Provider CA can be configured to support multiple CAs for each customer or business unit on a single platform. These "virtual" certification authorities enable an organization to control the certificate content, vary the certificate format and apply the appropriate security policies for specific customer needs without requiring separate platforms.
Digital Certificate Services (Thawte Certification)	SSL certificates, developer certificates, personal certificates, payment services, wireless services, enterprise PKI, etc.
Entrust/PKI (Entrust Technologies)	Entrust/PKI™ allows people to encrypt, digitally sign, and authenticate electronic transactions across all applications with best-in-class certified security.
Global Site Services (VeriSign)	Enables 128-bit SSL encryption with both domestic and export versions of Microsoft and Netscape browsers (export-version browsers are used by over 50 percent of internet users), 128-bitSSL encryption, the world's strongest for Web servers. Has never been broken. According to RSA Labs, it would take a trillion-trillion years to crack using today's technology.
Go Secure! (VeriSign)	A revolutionary new suite of managed applications services created especially to help your enterprise secure its most vital transaction and communication applications faster and more easily than ever before. Now your organization can rapidly incorporate digital certificate-based authentication, privacy, and non-alterable digital signatures into your existing e-mail and browsing applications, directories, VPN (Virtual Private Network) devices, Web servers, and ERP solutions-without the delays and expenses of changing your IT infrastructure.
iD2 Certificate Manager (iD2 Technologies)	Enables Certification Authorities to produce RSA keys and manage X.509 certificates for use in a variety of applications requiring secure identification and digital signatures. The product is designed for high-end users such as banks and postal and telecommunication companies, and has a standard API for high volume smart card production lines. All major RSA-based smart cards which meet iD2's stringent security demands are fully supported.
iD2 Servant (iD2 Technologies)	A high-end server software solution that simplifies and accelerates verification of certificates and digital signatures against Certificate Revocation Lists (CRL’s) for companies operating PKI-enabled applications.
KeySafe (nCipher)	Allows administrators to implement their specific security policy as it relates to cryptographic key management and HSM administration. Together with nCipher's nForce™ and nShield™ range of FIPS 140-1 validated HSMs, KeySafe provides a complete easy-to-use solution for secure key management. This solution is ideally suited to Certificate Authorities and e-commerce applications employing PKI.
KyberPASS Key Manager and Certificate Service (KyberPASS)	Add-on components to the KyberPASS™ Security Server software. The KyberPASS™ Key Manager and Certificate Server gives organizations the ability to implement Public Key Infrastructure (PKI) technology to operate their own certificate authority, without the enormous investment required for a large scale PKI.
Net Tools PKI Server (PGP)	A full-featured, internally secure PKI server product for Windows NT 4.0 Servers. It supports secure authenticated communication among the components of the Active Security integrated suite and the PGP VPN Suite. It can also be used as a general-purpose PKI server for certificates used by Network Associates* products.
OmniRoot (CyberTrust)	A optional offering that accompanies CyberTrust products and services, allowing customers to specify whether they wish to establish their own root and their own certification hierarchy, or whether they wish to have their certification authority (CA) issue certificates in the hierarchy under the widely supported CyberTrust root. OmniRoot provides customers with the software and licenses needed to issue certificates in the CyberTrust hierarchy, thus enabling the use of security material (the CyberTrust root certificate) that comes pre-installed in the popular web browsers.
OnSite (VeriSign)	Adds increased functionality to VeriSign's world-leading enterprise PKI service, including: Unparalleled key management and recovery. Automated Certificate Validation. An Application Integration Toolkit. Broad 3rd party application support. VPN Readiness. Dual Key Support. Automated Certificate Renewal. An updated Auto-Adminstration module. An updated Directory Integration module.
PureCA (Ascertia)	Ascertia’s PureCA is a powerful yet low-cost Certification Authority, specifically tailored for organizations requiring simple and immediate issuance of digital certificates. At a very low cost, PureCA will allow you to set-up an unlimited number of CAs and issue an unlimited number of certificates from a single installation (and hence a single license).
nForce (nCipher)	Provides secure and flexible key management facilities combined with powerful transaction acceleration found in nFast. Targeted for secure e-commerce transaction servers and other PKI-enabled applications, nForce is the only hardware security module available today providing both high security and speed for Internet transactions.
OCSP Client Tool (Ascertia)	The OCSP Client Tool is the latest tool from Ascertia that ensures that PKI systems are operating effectively and to specification. This stand alone OCSP client application can be used during the installation, operation and maintenance of a PKI system.
OCSP Crusher (Ascertia)	Ascertia OCSP Crusher is a sophisticated tool for PKI administrators and testers involved in the testing of performance and efficiency of OCSP servers. It allows the user to stress test an OCSP server with a selectable large number of OCSP requests. This allows PKI operations managers to prove how their systems respond to varying load conditions.
Onsite for Multiple Server IDs (VeriSign)	Lets you issue all the Server IDs you need - either standard or universal 128-bit SSL IDs. Secure all of the Web servers in your domain throughout even the largest enterprise. Convenient one-step purchasing: Take advantage of a single enrollment process, purchase order, and volume discounts. Easy to set up and configure: Start issuing Server IDs quickly via our intuitive Web-based process. Efficient centralized ID management: Secure and manage multiple servers throughout your domain, and easily renew IDs or buy additional IDs. Flexible ID bundles: IDs are available in bundles of 10, 25, 50, 100, or more. Broad compatibility: Global Server IDs are compatible with major Web servers, including Microsoft IIS, Netscape, Lotus, Tandem, and Nanoteq; Secure Server IDs are compatible with dozens more.
Passport Authorization (Diversinet)	Provides secure authorization services over distributed network architectures. It issues Digital Permits™ that can be used to carry applications specific information such as rights and privileges to authorize users.
Passport Certificate Server (Diversinet)	Provides the foundation for enabling electronic commerce, particularly in wireless environments.  Passport Certificate Server™ issues digital certificates used as the basis for authenticating users in a PKI environment. Anonymity and privacy are protected through Diversinet's patented technology. A revolutionary approach to using digital certificates separates the authorization credentials into Digital Permits, which are distinct from authentication certificates.
RSA Keon (RSA)	RSA Keon Advanced PKI helps companies simplify and optimize their use of PKI by extending digital certificates across organizations and applications. RSA Keon Standalone Desktop enhances PC security and simplifies security features enabled by a sophisticated public key infrastructure (PKI).RSA Keon Certificate Server enables organizations to establish and manage trusted identities for e-Business applications.
Secure Site Services (VeriSign)	Provide you with all of the authentication, SSL encryption, and added features you need to secure your intranet, extranet, or low-volume Web site. Secure Site Services enable strong 128-bit SSL encryption with domestic-version Microsoft and Netscape browsers, and industry 40-bit SSL with export-version browsers.
Spyrus PKI (Spyrus)	A high assurance Public Key Infrastructure (PKI) solution built for large corporate and government enterprises around the globe. SPYRUS PKI is the most technologically advanced PKI available for building the foundation companies need to implement their electronic business functions.
TrustConsole & PolicyUpdate (Ascertia)	Ascertia’s TrustConsole and live PolicyUpdate products have been specifically designed to help companies automate and proactively fix their trust policies when used in conjunction with Ascertia’s trust-enabled Secure Desktop application suite. Ascertia’s Secure Desktop application suite consists of: PDF Sign&Seal, ARP, SignEZee and PDF Signer.
TrustExchange Certificate Center (Digital Signature Trust)	Get TrustIDSM Certificates: DST offers TrustID personal and business certificates for sender authentication, access control, privacy and other uses, and TrustID server certificates for server authentication and security. Get Free Demo Certificates: DST's limited lifetime demo certificates enable you to evaluate TrustID certificate functionality before making a purchase decision. Check TrustID Certificate Status: Check the validity of a TrustID certificate. Revoke TrustID Certificate: Revoke a TrustID certificate if information contained in the certificate is no longer accurate, the private key has been compromised, or you suspect that someone has access to your certificate. To revoke a certificate, send a signed e-mail to helpdesk@digsigtrust.com or call DST's Help Desk at 888-248-4447. Download DST Root Certificate: If you are running Netscape version 4.51 or later, you already have DST's "root key" imbedded in your browser. If not, download DST's root key to maintain the privacy of your TrustID certificate application information.
TrustFinder OCSP (Ascertia)	Ascertia TrustFinder OCSP server is a sophisticated real-time Validation Authority, fully conformant with IETF RFC2560. It has been designed from the ground up to operate as a robust validation hub solution, capable of providing OCSP certificate validation services for multiple Certificate Authorities (CAs) simultaneously. TrustFinder OCSP server is packed with high-security and scalability features including full support for standards-based Distributed OCSP (D-OCSP) model.
TrustFinder SCVP (Ascertia)	Certificate validation is a complex process. If PKI is to be widely deployed in a variety of applications and environments, the amount of processing an application needs to perform before it can accept and use a certificate needs to be reduced. There are a variety of applications that can make use of public key certificates, but these applications are burdened with the overhead of constructing and validating the certification paths. TrustFinder SCVP also allows central administration and enforcement of PKI policies within an organization, rather than implementing them in each client application. It also shields PKI advances from certificate-using applications, i.e. back-end PKI standards and technology can be changed without affecting certificate-using application, thus making them future-proof.
TrustFinder XKMS (Ascertia)	Ascertia has implemented solutions based on private extensions to the OCSP standard, and via the use of proprietary protocols. However this is not a long-term approach, it is for this reason that Ascertia has adopted a standard approach XKMS (XML Key Management Specification) and implemented its TrustFinder XKMS product as the future of online trust services.

© 2005 by Timberline Technologies LLC