What is PKI Trust Manager?

An overview of PKI Trust Manager - Securetron's platform that fully automates certificate lifecycle management for your entire enterprise.

PKI Trust Manager is Securetron's certificate lifecycle management platform. It simplifies the management of PKI by fully automating certificate lifecycle management - giving you visibility into expiring certificates and discovering vulnerabilities across your enterprise, on-prem or in the cloud.

What it does#

CapabilityWhat it means for you
Automated lifecycleIssuance, renewal, and monitoring run automatically for the entire certificate lifecycle
DiscoveryContinuously maps certificates, expiring assets, and vulnerabilities across your estate
EnrolmentBuilt-in ACME (RFC 8555) with EAB, plus SCEP, EST, and REST APIs
AI onboardingBoltron-AI discovers applications, profiles configurations, and generates onboarding runbooks
AlertingCertificate notification alerts on expiring certificates with configurable lead times
ComplianceADCS and MSCA support, audit trails, and effortless reporting

How it fits#

PKI Trust Manager runs on-prem in your own environment, while PKI Trust Cloud delivers the same engine as a fully managed service. Both are driven by the same certificate lifecycle engine and work with Boltron-AI to automate discovery and onboarding.

Key concepts#

  • ACME: PKI Trust Manager exposes an RFC 8555 ACME server (part of CertAPI). Clients talk to an ACME directory URL, register an account with External Account Binding (EAB), create an order for a domain, and receive a certificate issued by your CA. See the ACME end-user guide.
  • SCEP / EST: enrolment paths for network devices, MDM, and TLS-authenticated clients. Test procedures are available in the guides.
  • Boltron-AI: the world's first AI-based automation for PKI - discovery, application inventory, configuration intelligence, and onboarding runbooks.

Next steps#