"The Kumertau air manufacturing enterprise" implemented an accounting system, managements and audit of means of authentication

On October 7, 2018 the Avanpost company announced completion of implementation of Avanpost PKI and Avanpost SSO in JSC Kumertau Air Manufacturing Enterprise (KUMAPP), the aircraft manufacturing enterprise making helicopters of the coaxial scheme of Kamov company.

The system created within this project became an important stage in development of an information system of JSC KUMAPP and had to solve the following problems:

• Centralized operation by electronic keys and certificates of employees of the customer, automation of process of release of electronic certificates and personalisation of electronic keys.
• Release of keys and certificates electronic signature for work of the users in the system Siemens Teamcenter supporting primary activity of the customer and integrated in support system of product lifecycle made by the enterprise.
• Ensuring two-factor authentication of users in a corporate domain of MS of the Active Directory.

According to the results of the project, all these objectives were achieved. In JSC KUMAPP the accounting system, managements and audit of means of authentication and storage of key information constructed on a linking of two mature software products of Avanpost company — Avanpost PKI and Avanpost SSO is implemented. The first became a basis for the management subsystem public key infrastructure (MSPKI), the second — the base of the management subsystem authentication (MSA). For both subsystems the corporate domain based on MS of the Active Directory which within this project was connected to the Avanpost software products using the standard module of interface (connector) was a source of credentials about users.

Besides, PUIOK was connected to the corporate certification center constructed on the basis of MS Certification Authority. In turn, PUA, thanks to integration into a corporate domain based on MS of the Active Directory and Siemens Teamcenter, had an opportunity to manage single authentication of users in all elements of a corporate information system of JSC KUMAPP necessary for them. Along with the solution of integration tasks the upgrade of Siemens Teamcenter which allowed is carried out is more complete to integrate it software into corporate infrastructure of the customer and also to provide mechanisms of pass-through authentication and the electronic signature.

Such complex approach to consolidation of the software products and information technologies involved in the project allowed to reach the high level of process automation of management of authentication of staff of the enterprise and to build processes of management of their electronic keys and electronic certificates. Consolidation of above-mentioned subsystems and creation of the automated processes of management of electronic keys and electronic certificates allowed to implement some more functions, important for the customer. Among them: two-factor authentication in a corporate domain, pass-through authentication in Siemens Teamcenter, the implementation of the electronic signature of objects in Siemens Teamcenter which allowed to use the EDS to the employees occupied in productive activity of JSC KUMAPP.