The CMS VerdeTTo Access Valve, together with CMS VerdeTTo IoT Directory Services, enable the performance of additional validation of inbound requests to the ThingWorx platform, based on unique client certificates and their extended attributes.
CMS VerdeTTo is also able, through a set of agent components and APIs, to monitor and manage the contents of a Root of Trust (RoT) – including certificate keystores and truststores – on both the platform server and the client devices. This ensures that certificates with a compromised key or certificate authority can be quickly blocked from accessing the platform, and that replacement certificates can be automatically issued and delivered to a device keystore.
Securing IoT devices and their data is critical. Only when a device carries a unique identity – a device certificate – can we ensure secure validation of device, data, and code. A shared token or key, or plain-text passwords, do not provide that security assurance level, and can hit limitations when trying to manage and control individual devices in distinct ways. This is similar to Enterprise IT, where a Directory of unique identities (and associated keys) is used to establish trust and to enforce authentication, authorization, and encryption.
CMS VerdeTTo enables organizations to establish their own dedicated IoT Directory and build a high assurance security model based on trusted identity and certificates. CMS VerdeTTo enables authentication, authorization, encryption and code signing based on a private Root of Trust (RoT), certificates, and private keys. Dedicated to the organization and hosted in a single-tenant model, the IoT Directory is fully managed by CSS, including a dedicated Public Key Infrastructure (PKI) for the issuance and delivery of unique certificates to each device.
Contact us for ThingWorx certification details on this product.
Certified Security Solutions (CSS) is a leading cybersecurity company that builds PKI-based software and services platforms to securely connect people, applications and devices to business ecosystems. Our solutions facilitate the ability to identify, authenticate, secure and manage digital assets across the Enterprise and the Internet of Things (IoT).
CSS helps clients mitigate risk and protect information assets through the practical application of security solutions. Each and every solution we deliver brings with it measurable and long-lasting business value and return on investment. CSS helps organizations all over the world implement and maintain information security measures that not only limit risk, but heighten the quality of products, services, and solutions they provide their customers. CSS realizes the importance security has on brand perception, customer acquisition and retention – and takes every step to ensure your secure infrastructure is always a competitive advantage, never a vulnerability.