vSEC:CMS Features Comparison

User PIN or Fingerprint Management

All the different versions of vSEC:CMS are very flexible when it comes to management of user PINS and fingerprints. All three systems can change user PINs, unblocking user PINs on both user and operator sides (online and offline), and update PIN and fingerprint policies. However, S-Series is more advanced compared to K-Series and T-Series in that it is capable of user PIN diversification and PIN mailing/exporting.

Administrator Key Management

K-Series, T-Series and S-Series are all capable of admin key diversification from hardware-protected masterkeys. However, K-Series is flexible in that it also allows for static admin key change, and admin key change from passphrase derivation.

Certificate Management

The vSEC:CMS suite is very flexible when it comes to certificate management. All of the different versions have the capability to conduct certificate listing, certificate importing (.p12 or .pfx) and certificate deletion. However, K-Series is unable to perform certificate lifecycle management, which involves enrollment, renewal and revocation.

User Self-Service Capabilities

S-Series is the only part of the vSEC:CMS suite that can conduct any user self-service capabilities. These self-service features include two-factor authentication, card issuance, unblocking of user PINs and connections from outside the domain.

In terms of databases, K-Series, T-Series and S-Series are all able to conduct card repositories, and backup and restore. In addition to the above, T-Series and S-Series are also able to have a transaction log.

External Connections

There are many varieties of external connections which vSEC:CMS can take. S-Series is the most flexible, being able to undertake the largest variety of external connections, such as connections to certificate authorities and devices such as cameras, scanners and webcams, whereas T-Series allows for most connections minus some key connections such as external databases and HSMs (see the table below for more).

Other Features

In addition to the wide variety of features above, vSEC:CMS has many additional features which users can take advantage of. S-Series, being our most actively-developed software, has the most features with lots of flexibility. T-Series also has some of the features which S-Series has, but misses some key features which customers may want, and K-Series even less so. The table below goes into detail about what other features vSEC:CMS does (and doesn’t) provide.