PKI Workflow Engine

Orchestrates certificate and key workflows across PKI environments with centralized policy-driven management.

Overview

PKI workflow and certificate governance

Eviden PKI Workflow Engine enables central administration of certificates and keys as well as management of multiple certification authorities. It combines a workflow engine with web interface and a management console for PKI operators. The workflow system enables design and implementation of PKI workflows using a graphical BPMN editor. The management console provides visibility into users, groups, certificates, tokens, and connected CAs, and can operate as a Registration Authority by forwarding and validating certificate requests. PKI systems are connected via CMP by default, while OIDC enables integration with Microsoft Entra ID.

Key capabilities

  • BPMN-based PKI workflow design

  • Registration Authority certificate handling

  • Central operator management console

  • CMP-based CA connectivity

  • OIDC and LDAP integration
     

PKI orchestration layer for workflow-driven certificate lifecycle management, RA operations, CA integration, and policy-controlled approvals.
 

Key features

What sets PKI Workflow Engine apart

pqc inventory icon

BPMN workflow designer

Defines PKI business processes using a graphical drag-and-drop BPMN editor.


Source states workflows can be designed using a graphical BPMN editor by drag and drop.

Communication Security icon

Registration Authority function

Validates certificate requests and forwards them to connected PKI systems.


Source states the management console can be used as a Registration Authority.

pqc implementation icon

Modular CA and directory integration

Connects internal and external CAs and directory services through standard connectors.


Source lists CMP-based PKI connector and LDAP connector for Active Directory.

Benefits

PKI management system for central administration of certificates, keys, and certification authorities

P

Policy-based control

Maps certificate and compliance guidelines into workflows, including approval scenarios such as the four-eyes principle.

Operational transparency

Operational transparency

Gives PKI operators an overview of users, certificates, tokens, tasks, and connected CAs.

F

Flexible PKI integration

Supports internal and external CA connectivity without replacing existing PKI systems.

Why Eviden

Why choose PKI Workflow Engine

Unmatched PKI flexibility

  • Combines workflow engine, RA function, and operator console
  • Graphical BPMN process modeling for PKI workflows
  • CMP, OIDC, and LDAP integration for heterogeneous PKI environments.

     

Optional proof

  • Source states BPMN drag-and-drop workflow designer
  • Source states CMP interface is default for PKI system connection
  • Source states OIDC enables Microsoft Entra ID integration.

 

Proof & Evidence

  • Compliance: Supports mapping of certificate and compliance guidelines into PKI workflows, including approval scenarios.

Architecture & Integration

Deployment model: PKI management system with workflow engine, web interface, and management console
Supported platforms: Specific operating systems not explicitly stated on source page

Key integrations:

  • Internal and external certification authorities
  • D-Trust via PKI Connector
  • Active Directory via LDAP Connector
  • Microsoft Entra ID via OIDC
  • PKI systems via CMP interface.

 

Standards supported: BPMN workflow modeling, CMP interface, OpenID Connect (OIDC), LDAP / Active Directory integration

 

FAQ

Frequently asked questions

It is a PKI management system for central administration of certificates, keys, and CAs.

It designs and implements PKI workflows and integrates external data sources.

Yes. Certificate and compliance guidelines can be mapped into workflows.

Yes, it supports release scenarios such as the four-eyes principle.

Solution

Eviden PKI Workflow Engine

PKI management with workflow functionality

In an increasingly digitized world, businesses and government agencies face the challenge of protecting sensitive information and data from the dangers of the digital world. Cyberattacks, data leaks and unauthorized access are just some of the risks that need to be managed. Considering holistic PKI management workflows, Eviden PKI Workflow Engine helps to build, manage and execute resilient PKI lifecycles. Discover the benefits of a secure and efficient solution that helps you manage the threats of the digital world and protect your organization in the digital age.


Effortless certificate lifecycle management

One of the key advantages of Eviden PKI Workflow Engine is its ability to fully automate the certificate lifecycle. After a one-time setup, users no longer need to manage their certificates—renewals, revocations, and re-issuances occur seamlessly in the background. This reduces administrative overhead, minimizes human error and expiration risks, and ensures continuous security and compliance while users focus on their core tasks.

Eviden PKI Workflow Engine - factsheet

Discover

Other Digital Identity products

Interested in PKI Workflow Engine

Talk to an expert