KMES Series 3 by FutureX offers a scalable key management solution for diverse encryption key use cases, automates key lifecycle routines, and secures private keys with a built-in FIPS 140-2 Level 3 validated HSM. It is deployable on-premises or in the cloud and integrates with public cloud providers, serving as the cornerstone of enterprise cryptographic ecosystems. KMES Series 3 supports the management of keys, certificates, and cryptographic objects, providing a centralized platform for secure key storage, key rotation, and disposal. It handles symmetric and asymmetric encryption, securing private keys for public key infrastructure (PKI) and an offline root certificate authority (CA), enabling mutual authentication between devices and users. The modular architecture of KMES Series 3 allows for custom solutions for various industries, and its integration with FutureX’s solution suite enables functionality expansion and management of PKI and CA. It offers full key and certificate lifecycle management, enterprise certificate and registration authority, turnkey application encryption, remote key management for ATM and point of sale, robust user and group permission system, and vaultless tokenization. KMES Series 3 supports tens of millions of cryptographic objects and provides functionality for ATM and Point of Sale remote key loading. It features a web-based workflow management for automation of key lifecycle tasks and standards-based libraries for easy integration, including KMIP, C#. NET, and Java Unified Cryptographic Platform. The platform is designed for turnkey implementation, with customized audit reports and activity logging, scalable integration with multiple KMES devices, and automatic synchronization of keys and certificates between connected devices. Masterless Peering enables high availability architecture, and the Enterprise Certificate Authority features virtually limitless scalability of certificate authorities. KMES Series 3 supports CRL, OCSP, and SCEP for certificate status management and extended validation certificates. It integrates fully with Azure Key Vault and supports EMVCo-compliant self-signed issuer certificate creation.
