GlobalSign Managed PKI

GlobalSign offers a suite of training and support resources to assist new users in effectively utilizing their Managed Public Key Infrastructure (PKI) platform:

• Support Knowledge Base: GlobalSign's Support Knowledge Base provides detailed articles and guides on various topics related to their products and services. Users can access information on certificate management, platform features, and troubleshooting steps.

• Webinars: To enhance user understanding of PKI concepts and best practices, GlobalSign offers webinars covering topics such as advanced cryptography, IoT device security, and certificate management strategies. These sessions are available

• Administrative Guides: For users enrolled in GlobalSign's Enterprise PKI (EPKI) services, administrative guides are available to assist in setting up and managing ordering and other administrative functions within their accounts.

• Live Support Channels: GlobalSign provides multiple channels for direct support, including live chat, phone support, and email assistance. Users can contact the support team for personalized guidance and prompt resolution of their queries.

GlobalSign Managed Public Key Infrastructure (PKI) platform incorporates several robust security measures to protect data and ensure the integrity of digital communications:

• Data Encryption and Signing: The platform utilizes advanced data encryption techniques to render information unreadable to unauthorized parties. Only recipients possessing the corresponding private keys can decrypt and access the data, ensuring confidentiality. Additionally, data signing capabilities verify the authenticity and integrity of the information, preventing tampering during transmission.

• Strong Authentication Mechanisms: GlobalSign's Managed PKI employs digital certificates as electronic credentials to authenticate users, devices, and servers. This strong authentication framework ensures that only authorized entities can access critical systems and data, enhancing overall security.

• Certificate Lifecycle Management: The platform offers automated certificate lifecycle management, encompassing issuance, renewal, and revocation processes. This automation minimizes human error and reduces the likelihood of security breaches arising from expired or mismanaged certificates.

• Integration with Zero Trust Security Models: By integrating with Zero Trust security frameworks, GlobalSign's PKI adds layers of protection and authentication to organizational systems and data. This approach ensures that every access request is thoroughly verified, regardless of its origin, aligning with modern security best practices.

• Mobile Device Security: The platform extends security measures to mobile devices by controlling access to corporate networks through certificate-based authentication. This ensures that only authorized mobile devices can connect to organizational resources, safeguarding against unauthorized access.

GlobalSign policies on data ownership and portability within its Managed Public Key Infrastructure (PKI) services are designed to respect user rights and ensure compliance with applicable data protection regulations:

• Data Ownership: GlobalSign acknowledges the importance of personal data protection and outlines its practices in the GlobalSign Data Protection Policy. This policy details GlobalSign's commitment to safeguarding personal data collected during the provision of PKI products and services. It specifies the types of information collected, the purposes for which it is used, and the measures taken to protect this data. While the policy emphasizes data protection, it does not explicitly address data ownership rights. However, by adhering to data protection principles, GlobalSign ensures that personal data is handled responsibly and in compliance with relevant laws.

• Data Portability: GlobalSign's Privacy Policy outlines the company's commitment to respecting user privacy and details the rights of individuals concerning their personal data. The policy informs users about their rights, including access to their data, correction of inaccuracies, and, where applicable, the right to data portability. Data portability allows individuals to obtain and reuse their personal data across different services. While the policy emphasizes privacy practices, it does not provide specific procedures for data portability within the Managed PKI services.

• Certificate Management and Portability: GlobalSign's Managed PKI platform offers centralized control over digital certificates, allowing organizations to manage certificate issuance, renewal, and revocation efficiently. The platform's design facilitates integration with existing IT infrastructures, potentially supporting data portability requirements by enabling seamless management and migration of digital certificates. However, specific details regarding data portability features within the Managed PKI services are not explicitly detailed in the available sources.

The terms and conditions for contract renewal and cancellation for GlobalSign Managed PKI are outlined through various policies and practices.

• Renewal Process: Certificates can be renewed through the GlobalSign Certificate Center (GCC) within a renewal period of 90 days before expiration. Notifications for upcoming renewals are provided, and administrators can manage renewals directly via the GCC dashboard.

• Cancellation Policy: Orders can be canceled automatically within a 7-day refund period after the certificate is issued. Beyond this period, users must contact GlobalSign support to request cancellation. Refunds are processed based on the payment method, either by refunding credit card payments, canceling invoices, or crediting deposit accounts.

• Subscriber Obligations: Subscribers must provide accurate information during the certificate request process and promptly notify GlobalSign of any changes or suspected misuse of their private key or certificate. Failure to comply with these obligations may result in revocation or termination of services.

• Refund Policy: Subscribers dissatisfied with their issued certificates can request a refund within 7 days of issuance. Refunds exclude fees incurred by GlobalSign during the transaction.

• Termination Conditions: Agreements terminate upon certificate expiration or if GlobalSign determines that continued use of the certificate compromises security, reputation, or trust status. Additionally, misuse, compromise, or legal violations related to certificates may lead to immediate termination

GlobalSign Managed PKI adheres to the following compliance standards:

Key Compliance Standards Supported by GlobalSign's Managed PKI:

1. Health Insurance Portability and Accountability Act (HIPAA):

   • GlobalSign's Managed PKI offers data encryption and signing capabilities that help healthcare organizations protect sensitive patient information, aligning with HIPAA's stringent data protection mandates.

2. Payment Card Industry Data Security Standard (PCI DSS):

   • By implementing robust encryption and authentication mechanisms, GlobalSign's PKI solutions assist businesses in securing payment card data, supporting compliance with PCI DSS requirements.

3. General Data Protection Regulation (GDPR):

   • GlobalSign's PKI solutions provide secure methods for data encryption and authentication, aiding businesses in protecting personal data and supporting compliance with GDPR.

4. North American Energy Standards Board (NAESB):
   • GlobalSign is recognized as a preferred Certificate Authority for digital certificates that meet the stringent security standards of the energy industry, supporting compliance with NAESB requirements.