Sequoia® v2 is a complete product suite for secure electronic Identity Management for governments, administrations, industry, and end users. It covers all needs for protection of electronic information and sensitive data.

Sequoia® V2 is available in two modes:

On premises Mode: Software solution installed a license on premises. Adapted to all customer requirements, Sequoia® enables clients to manage themselves their Public Key Infrastructure and
allows implementing a large variety of business cases.

SaaS Mode (Software as a Service): Service managed on a multi-tenant platform, hosted in Keynectis’ high-secure data center.

Based on its expertise as Certified Trust Service Provider (French label “PSCE/PSCO”), Keynectis assures highest requirements in terms of high availability and security for the benefit of its customers.

Sequoia® suite contains three software components:

Keyseed (version 2.6.2)

Offline software module in charge of CA lifecycle management, connected to a Hardware Security Module (HSM). This module enables in particular, CA key pair generation, CA certificate signature, Authority Revocation Lists (ARL) Signature, import and export of secret keys.

Trust.Center (version 2.3.5)

Software module in charge of end user certificate life cycle management, i.e certificate template
definition, certificate and certificate revocation lists (CRL) generation.

K.Registration (version 2.6.7):

Software module in charge of end user certificate lifecycle management workflows (enrollment,
validation, issuance, pickup, revocation, renewal

These modules can be used in combination to implement a complete PKI. It is also possible to use them independently. Following configurations are possible:

• KeySeed® only
• Trust.Center® only
• Trust.Center® in combination with KeySeed®
• Trust.Center® in combination with K.Registration® and KeySeed®

Certification

Sequoia® v2 (composed of KeySeed® v2.6.2, Trust.Center® v2.3.5 and K.Registration® v2.6.7) was qualified by ANSSI at standard level on octobre 2010, 5th (certificate #2544/ANSSI/SR/RGL) based on a Common Criteria EAL4 + (ALC FLR.3 – Flaw remediation). The cryptography implementation was assessed by ANSSI that declared its compliancy with its recommandatons.

Certification services

The Sequoia software suite implements following services for digital certificate life cycle management
and certificate revocation lists generation :

• Enrollment Service
• Certificate Request Service
• Certificate Production Service
• Certificate Pickup Service
• Revocation Service
• Publication Service
• Trusted Roles Creation and Management (Administrator, Operator, Auditor)
• Logging and Audit Service

For more information please visit the ANSSI product page.