Venafi Encryption Director
Strengths: Solid certificate encryption management and policy compliance
Weaknesses: Focuses only on certificate management and no other policy compliance
Verdict: If you need to focus on encryption this is your best bet
Venafi Encryption Director takes a different approach to policy and compliance management. It focuses on ensuring that encryption technologies used throughout the enterprise meet compliance needs.
It does this by automatically inspecting systems to discover in-place encryption technologies and then cataloguing the certificates and keys it finds. The system then monitors discovered and previously known certificates and keys and alerts administrators, according to policy, of upcoming expirations and required maintenance.
Installation was simple and straightforward. The single executable installer launches a setup wizard that leads through the process of not only installing the services and the web console but also setting up the initial private keys.
After installation is complete all management is done through the web-based management console. We found it to be fairly easy to use and navigate but we did find initial configuration to be a bit confusing.
The Encryption Director can search and discover the already existing certificates throughout the enterprise. It can inventory them to be sure that they meet the compliance needs of the environment and also so administrators can easily spot and remediate problems. This discovery process can also help weed out potential problem certificates, expired certificates or even rogue certificate authorities. It can work with SSL, EV SSL, TLS, SMTP and self-signed certificates.
Documentation provided with this product included both an installation and administrator guide, as well as some other integration guides all in PDF format. We found them to be easy to follow, with many step-by-step instructions, screenshots and configuration examples.
Venafi offers standard and premium support at an extra cost. Options include both phone and email technical support, as well as access to a small web-based support portal. Customers can use this portal to track support cases and submit new ones. Venafi does not offer an online knowledgebase or a resource area on the website.
At a price ranging from £28 to £215 per managed asset we find Encryption Director to be good value for the money. It handles a problem that can plague many enterprises and cause many security risks in one tool.