The certification authorities
The offline root and the intermediate issuing authorities.
VOGO eBS PKI
The organisation’s internal certificates, issued and controlled in-house
PKI — Public Key Infrastructure, the infrastructure that issues and validates the digital certificates through which services, devices and documents prove their identity.
Installed entirely in the organisation’s infrastructure, with no dependency on an external service. Qualified certificates of persons stay with the qualified trust service providers.
- Offline root authority
- OCSP and revocation lists
- Institutional seal
VOGO eBS PKI
The full certificate lifecycle, from request to revocation
VOGO eBS PKI issues the organisation’s internal certificates from its own hierarchy: a root authority kept offline and intermediate authorities for each category of use — services and servers, devices, authentication, non-qualified signing, technical seal.
Requests are validated and approved by role, certificates are renewed before they expire, and a revocation goes immediately into the revocation list and the OCSP response. Each certificate shows its holder, use, validity and state.
In the VOGO eBS applications, internal certificates secure the communication between components, the signatures in internal circuits, the timestamp and the seal applied automatically at registration, issuance and archiving.
Issuance. Validation. Revocation. Trust.
Own hierarchy
An offline root authority and intermediate authorities per category of use.
Certificate profiles
Services, devices, user authentication, non-qualified signing, technical seal.
Scheduled renewal
Before expiry, with notification of the holder and the administrator.
Immediate revocation
With the reason recorded, published in the revocation list and the OCSP response.
TLS and service identity
Communication between components, APIs and connectors, with mutual authentication.
Internal signatures
Word and PDF documents signed individually or in bulk, in PAdES, CAdES and XAdES.
Institutional seal
Applied automatically by the system at registration, issuance and archiving.
Timestamping
The timestamp linked to the signature, for long-term validation.
What makes the product different
Protected keys
Authority keys in hardware security modules, with multiple approval for critical operations.
Separate roles
The authority administrator, the registration officer, the auditor and the operator are distinct roles.
Logs in the SIEM
Issuances, revocations and administrative access reach the security component.
Validation on every use
The chain, validity and state are checked every time, with the result kept with the document.
VOGO delivers and integrates the product, the certificate profiles and the issuance policies, with support for the whole contract.
VOGO eBS PKI — a single integrated product
Status publication
The revocation lists and the OCSP service, within the organisation’s perimeter.
Signing and validation
Signing requests, signature validation and timestamping.
Trust distribution
The root certificate and the chain of trust, distributed automatically to components and workstations.
The product uses as mature open-source libraries: EJBCA.
Frequently asked questions
What is VOGO eBS PKI?
It is the internal public key infrastructure of the VOGO eBS suite: it issues, renews, revokes and validates the organisation’s internal certificates.
Does it issue qualified certificates for persons?
No. Qualified certificates of persons are still issued by qualified trust service providers and are used separately, through the local signing agent, without exporting the private key.
Where does it run?
On premise or in a private cloud, with no mandatory external connectivity. Revocation lists and the OCSP response are published within the organisation’s perimeter.
Is it a VOGO product?
Yes. VOGO eBS PKI is part of the VOGO eBS suite and uses as mature open-source libraries: EJBCA.
Request a demo
See how VOGO eBS PKI works
Request a demo for your organisation’s internal certificates.
Note: The services are provided in line with the European DNSH principle – “Do No Significant Harm”, in accordance with Article 17 of Regulation (EU) 2020/852 on the establishment of a framework to facilitate sustainable investment and with the European Commission’s technical guidance on the application of the DNSH principle, C/2023/111.