Security threats and compliance regulations lead to an increasing use of e-mail encryption and digital signatures, both of which depend on the use and distribution of digital certificates that are supposed to authenticate identities. Since certificates can be forged it is necessary to verify these certificates. There are various sources that issue certificates, so-called Certification Authorities (CAs) that belong to Trustcenters or larger enterprises that run their own CAs. With Root CAs and intertwined cross certification processes it can be very difficult and time consuming to verify the validity of a certificate.
Z1 Global TrustPoint makes the use of PKIs less troublesome and more efficient. The portal works as a powerful certificate publishing service and search engine with automated verification. Companies can upload their public keys, which in turn can then be found and downloaded by any user. The verification process is performed via LDAP connections and real time OCSP-requests. Now that connections have been extended, users can also find and verify certificates issued by Signtrust and any EBCA member.
The product that is actually providing the Z1 Global TrustPoint services is "Z1 CertServer" which is available as appliance solution for larger enterprises and comes with various APIs and configuration options. It is already widely used because it also works as a component of Zertificon's renowned e-mail encryption solution, Z1 SecureMail Gateway. Z1 CertServer has been centrally requesting, managing and verifying X.509 certificates and PGP keys in hundreds of instances very efficiently and largely unrecognised for years. The default Z1 CertServer Trustcenter connections can be altered and extended individually, a connection to the ever-growing Z1 Global TrustPoint is recommended.
Z1 Global TrustPoint is open to the public and meant to simplify secure communication for all parties involved.