Axiad Conductor for Airgap

What is Axiad Conductor for Airgap?

Deployed as an on-premises offering, Axiad Conductor for Airgap is a Unified Credential Management System (UCMS) that provides unified, consistent, and efficient credential management for end-users by streamlining the management of your Enterprise authentication credentials. It combines high-security with a user-centric design to allow for a painless rollout of passwordless (or other multi-factor authentication) method in your environment.

With support for all authentication credentials across the organization, the product automates lifecycle credential management at scale and everywhere needed. Axiad Conductor helps large organizations with very high security needs or very significant on-premises application investments to enhance security while minimizing IT overhead.

What are the Key Features?

Device Management

Axiad Conductor supports a wide selection of devices such as:

• Security keys (Idemia, Thales, Yubico)

• Smart cards (Idemia, Thales)

End-users can then employ these devices to securely log into web resources, workstations, and VPNs that support certificate-based or FIDO2 authentication.

GlobalPlatform

Axiad Conductor supports GlobalPlatform secure communication – HSM integration to ensure end-to-end secure communications with the device, and no exposure of sensitive data.

Compliance and Regulation

Axiad Conductor meets compliance needs required by many regulations and mandates, including:

• FIPS 201

• FIPS 140-2

• NIST SP800-171

• NIST SP800-63B

Integration with Your Ecosystem

Axiad Conductor provides easy integration with your ecosystem:

• Connectors for Microsoft Active Directory, Microsoft CA, IdenTrust PKI, Keyfactor EJBCA, and other third-party PKIs

• Standards-based for provisioning and authentication, including:

  • SCIM

  • SAMLv2

  • OpenID Connect

• Rich REST APIs for deeper integration

Administration

• Set up operators, manage access, and define roles for fine-grain, delegated administration

• Configure source repositories, authentication methods, device profiles, certificate authorities, audit logs, security keys in your HSMs, and more in a central location

Lifecycle Management

Manage the entire lifecycle of all credential types within a single platform. Actions include:

• certificate/device issuance

• PIN change, reset, and unlock

• suspension

• reactivation

• renewal

• replacement

• revocation

Auditing

• Actions performed via the portals, and requests sent via the APIs, are audited to your database or syslog