Move To Cloud
Cloud technology is disrupting the way Information Systems are designed. However, various scenarios apply in organizations on their path to move to Cloud.
Hold your keys on premises
In this scenario, organizations moving their IS to the Cloud might want to keep the keys to their IT on premises. EverTrust Horizon integrates very well in such scenario, allowing Cloud-based infrastructure, such as MDM/EMM (Microsoft Intune, Jamf Pro, VMWare Workspace One, etc.) as well as Certificate Vaults (AWS ACM, Azure Key Vault, etc.), Cloud-based DevOps platforms (EKS, AKS, GKE, Scaleway, etc.) and various other elements to consume services from the on-premises PKI.
On the other hand, organizations might want to build a new, Cloud-based PKI, as part of developing new Cloud-based services or because existing on-premises PKI. EverTrust Stream allows to issue certificates from the Cloud, while keeping the keys within the company’s perimeter, and EverTrust Horizon then allows both on-premises and Cloud services to consume certificates issued by Stream.
EverTrust Horizon has allowed us to securely manage certificates without any manual intervention and reduce our costs by 30%.
Organizations that are more mature in their Cloud strategy might want to deploy their PKI in full Cloud environment, meaning that both the PKI and consuming services will be in the Cloud. EverTrust Stream and Horizon adapt very well to such environments, especially thanks to the provided Kubernetes packaging, SaaS delivery option, and all the provided connectors that makes it Azure-AD Joined ready and able to integrate easily with other Clouders such as AWS.
On the other hand, organizations that are not yet ready at all to move to Cloud environment might want to opt for a full on-premise deployment. EverTrust products also adapt very well to such environment, thanks to the provided RPM packaging, HSM compatibility, and all the provided connectors that make them able to integrate easily with typical on-premise solutions such as F5 Big-IP and VM-based servers (Apache, nginx, Tomcat, ...)