SaaS makes it convenient and economical to distribute certificates!
TerasTrust
This service makes it possible to issue client certificates at a low price.
It allows customers to authorize access to in-house information assets limited to terminals under their company’s control.
Service Overview
This service enables customers to issue client certificates used for various purposes, including Microsoft Japan’s Office 365, which is used at many companies, at a low price. Minimizing the burden of client certificate management, it allows you to access in-house information assets limited to terminals under your company’s control.
- 1 For Excel and other Office products, the 2013 version (patches and other requirements apply) or newer is necessary.
- 2 For devices using iOS, the implementation of Microsoft Authenticator is necessary.
Service Features
By using the distributed certificates, you can also control access to Office 365.
This service is already being used for access control of Office 365 by almost 10,000 users.
Prevent Certificate Distribution Leakage
For customers using Windows / Internet Explorer, when distributing electronic certificates from TerasTrust to the terminal, you can limit the number of imports to one time. In the case of iOS, it is possible to limit the terminals using IMEI / UDID.
- By limiting the storage of certificates to one time, it is possible to limit the terminals that have the certification.
- Because the electronic certificate stored in the certificate store is stored as “unexportable,” it is not possible to copy it and use it for other terminals.
- The host name of the terminal with the imported certificate will be recorded by TerasTrust.
Administrator Screen / User Portal Screen
The administrator only has to issue the certificate from the administrator screen and then the end users can obtain the certificate by themselves. They will be able to obtain the certificate from the end users’ portal site.
| Service | How to Use It |
|---|---|
| Office 365 | In addition to the various services accessed through the browser, it is possible to control logins (※)for client applications such as ActiveSync, OneDrive, and Skype for Business
with certificates. ※ A certification service such as AD FS is necessary. |
| WiFi | By using EAP-TLS, a certificate will be required when connecting to WiFi, limiting WiFi access from terminals without certification. Due to specifications, a RADIUS server will be necessary. |
| VDI / VPN | It can also be used when accessing in-house environments such as VDI or VPN from outside. |
Share