Your network’s security is highly dependent upon the integrity of the credentials used to gain access. The integrity of those credentials may be determined by services outside your control. While your servers exist on a router and switch-based network, the credentials presented to those servers for access are supported by a trust network. Network status needs to extend beyond IP addresses and service availability to include trust and the integrity of connections, resources, and users.
TrustMonitor™ delivers instant notifications, impact analysis, and trend information for the real-time situational awareness needed to assess risks and minimize service outages.
TrustMonitor™ provides access to both real-time and historic trend information relating to specific incidents, as well as reporting and alert features to support incident response handling.
Every digital certificate user needs to be aware of the ROCA vulnerability discovered by researchers at Masaryk University in the Czech Republic, and most importantly, whether their identity credentials are susceptible to this weakness.
Using the same detection code authored by the researchers, CertiPath created the free TrustMonitor ROCA Vulnerability Test tool that can accept bulk certificates or certificate bundles (p7b) and provide immediate results. Also provided is a set of test certificates containing vulnerable keys that can be used to confirm any ROCA test tool’s capabilities.
TrustMonitor™ works by monitoring PKI distribution points for all of the PKIs in any given trust fabric and verifying the validity and integrity of the Certification Authorities (CA), OCSP infrastructure and Certificate Revocation Lists (CRL) hosted at those locations. TrustMonitor™ then examines these objects and reports on any changes to them since they were last examined.
The results are contextualized and visualized within the TrustMonitor™ interface, which provides a high-level visual depiction of the PKIs in the federated community and their various trust chain artifacts, trust relationships and problem conditions that have been encountered. In addition, TrustMonitor™ provides email and/or text messages to designated personnel when alerts arise. The notification threshold and PKIs for which alerts are enabled are determined by the local administrators.