Avanpost CA (Certificate Authority)

2025: Presentation of Avanpost CA Corporate Certification Authority

Avanpost on August 27, 2025 announced the entry into the market of the Avanpost CA corporate certification center, a universal solution for managing digital certificates in hybrid IT infrastructures.

Avanpost CA is designed with a focus on completely replacing the Microsoft Certificate Authority and provides support for a wide range of devices and operating systems - from Windows Linux and to mobile platforms and, iOS as well Android as network equipment Cisco and systems. container virtualizations The solution fully complies with international standards PKI and X.509.

Key advantages of Avanpost CA:

• Versatility and hybridity: A single certification authority for all enterprise systems, including Windows, Linux, macOS, mobile devices, and container platforms.
• Certificate lifecycle automation: seamless migration from Microsoft CA, templates for automatic release and re-release, integration with the Avanpost DS directory, and support for MS-WSTEP, SCEP, and OCSP protocols.
• Linux Autoenrollment: supports the full functionality of automatic release and renewal of certificates for in the Linux domain (Avanpost DS).
• High level of security: LDAP/Kerberos-based RBAC, automatic audit of operations, offline storage of root certification authorities, control through domain policies and protection against MitM attacks.
• Complete import independence: development in the Go language without using vulnerable Open source libraries, support for Russian standards and compliance with the requirements of import substitution legislation.
• Efficiency and scalability: support for clustering, fault tolerance and compatibility with various DBMS (PostgreSQL, Postgres Pro, etc.)

Avanpost CA combines into a single digital platform with Avanpost DS and PKI products, fully ensuring the need for certificates and automation of PKI processes for the largest Russian organizations, government agencies and corporations.

Avanpost CA is the heart of digital security for modern corporate infrastructures, a full-fledged trusted party that meets the needs of the present and future. In this regard, we plan to further develop the product in 2025-2026, including support for hardware-independent HSM key protection, certification, FSTEC integration with HashiCorp Vault, Kubernetes Secrets and DevOps tools to expand the capabilities of digital certificate management in modern IT environments, "said Evgeny Galkin, Director of Cryptography, Avanpost.