PKI FreshStart

Put Your PKI Concerns Behind You

A Simplified, Easy to Manage ADCS PKI Implementation for Small and Midsized Businesses

A poorly implemented and documented PKI can often cause more problems than it solves. Wouldn’t it be great if your small or midsize business (SMB) could have a PKI based on Microsoft Active Directory Certificate Services (ADCS) that is built using industry best practices, fully tailored to your needs, comes with complete documentation and maintains itself? If so, then our PKI Solutions FreshStart offering may be just what you’re looking for.

With PKI Solutions FreshStart you can put the reliability, integrity, and management problems associated with an improperly implemented PKI in the rearview mirror and start over with a simplified, easy to manage Microsoft ADCS based PKI.  Let’s face it, sometimes it’s better and easier to just move to an entirely new, properly documented, and configured PKI.

We can make that move occur smoothly and with little disruption to your existing environment. No sudden “broken” certificates. In about a week, we can decommission your old PKI and replace it with a professionally designed and implemented certificate management solution your business can depend on. It is truly a fresh start!

The FreshStart Advantage

Enterprise Class for SMB - Minus the Hassle

Over the past 15+ years, PKI Solutions has had the opportunity to worth with large enterprises on designing and deploying complex Microsoft ADCS PKI implementations involving multiple certificate authorities (CAs), offline and policy CAs, hardware security modules (HSMs) and more all with the intention of meeting the most stringent security requirements. Most SMB organizations, however, don’t need this level of complexity nor do they have the budget to support the implementation of an advanced enterprise-class PKI designed to support millions of endpoints and certificates. They are also don’t need the complexity of offline systems that require maintenance that if missed can result in outages.

With PKI Solutions FreshStart, all the knowledge and experience we’ve gained from working with large enterprises has been encapsulated into a simplified PKI that will be stable and improve your organization’s security posture. It includes the same best practices, the same documentation, and the same set of configuration details of larger implementations boiled down to a single-tier Enterprise Root CA. For many companies in the SMB segment, it’s all they need, while also providing a strong basis for growth should needs change.

A smaller, simplified PKI is also ideal for SMBs with limited IT staff or PKI expertise. Because it’s online and publishing information regularly, there’s no need for day-to-day supervision. And since the PKI FreshStart includes operations documentation, handoffs during staff transitions are fast and simple.

PKI FreshStart At A Glance

Comprehensive and Fast

5-day project time from start to finish. We hit the ground running and ensure a smooth deployment

Thoroughly Planned and Designed

Whiteboarding and meetings regarding use cases and potential impact on PKI design

Documentation and Build Scripts

Server build scripts with step-by-step installation and configuration process

Production Ready PKI in Days

Deployment of enterprise root CA and creation of up to 5 certificate templates for your business use cases

Operational Documentation Drafts

Documentation for monitoring, backups, support and operations ready for your customization

Migrate from Legacy PKI

Review and identify certificates to be migrated. Decommission Legacy PKI system if Needed

Designed Around Your Needs

The PKI FreshStart process starts with a kick-off meeting or conference call to identify your needs and requirements. Once the build process starts, we work with your team side-by-side to ensure a close fit with your requirements and to provide hands-on mentorship throughout the process. The entire process takes about five days from start to finish. If needed, teams can also take advantage of our online training courses, including Microsoft PKI In-Depth and Microsoft ADCS Advanced.