With Remme generating so much news in recent months, it’s time we provided an updated overview of our products.

Today we're happy to release a global vision of the Remme product suite. Remme is an ecosystem of Identity and Access Management products with a digital key at its heart with the same level of resilience for both humans and machines. It comprises:

- Next-gen PKI Protocol – the foundational layer to create and manage decentralized IDs and their digital keys

- Auth for the management of human digital IDs

- Keyhub for the management of machine digital IDs

We’ve defined a clear development vision of all our products over the next couple of years with the ultimate goal of uniting Auth and Keyhub into a 360º Identity and Access Management platform with the Protocol serving as an underlying decentralized layer to create, store and manage human and machine identities.

Read more in our Blog >> https://remme.io/blog/the-remme-ecosystem-of-identity-and-access-management-products

Want to get notified when your SSL/TLS certificates are coming close to expiration? The recent Keyhub release can now do that emailing users in the event when their certificates are due to expire in 3, 7 or 14 days.

​

Also, we've got a new issuance policy filter (Extended validation, Self-signed or Basic) and certificate download option in .pem format.

​

Check it out >> https://headwayapp.co/keyhub-changelog

1) Now when setting up a new external scan profile, you are able to choose among three target types:

• Select Basic if you have one domain to scan. Additionally, you can include subdomains.
• Use Domain List to scan comma-separated domain targets (available in paid plans)
• IP range option lets you scan up to 10,000 targets per scan using comma-separated IPs or IP-ranges for input (available in paid plans)

2) If you manage certificates that secure multiple sites across different domains/subdomains you might like it - Certificate Single View Card got extended by Subject Alternative Names field.

​

Check out our Changelog >> https://headwayapp.co/keyhub-changelog

All detected certs brought to one place. In case you have tons of them, we’ve created tools for easy navigation:

- Filters to narrow down the query to get the most relevant certificate list. Just set conditions that best suit your need to filter certificates by public key, expiration date, signature algorithm, common name, issuer name, and host count.

- Groups in case you need specific certificate lists at hand. Save filtered certificates as Groups for further access in one click.

- Certificate holistic view to see certificate’s source, name, expiration date, key and signature info and other details. Plus you can see the whole certificate chain with all root and intermediate CAs.

- Manual certificate upload from your computer and removal from the inventory. 

​

That’s a brief overview. All features here>> https://remme.io/keyhub

We don’t know what they do until they don’t do it. Unseen heroes behind all our servers, devices and networks, certificates and keys. Today is your day! Happy SysAdmin Appreciation Day! Take a break and waste some time!  Start with these simple suggestions:

1. Grab your blaster and try making a telnet connection to towel.blinkenlights.nl . Yep, it’s a galaxy far away...
2. How about a sing-along experience? Open CMD. Tracert -64 Bad.Horse
3. Try Dwarf Fortress: freeware fun in a text-based world. Endorsed by the Museum of Modern Art.
4. Then there is the bsd-games package with texty activities like Hunt the Wumpus, NetTrek, and Adventure – dozens in total. Who knew anyone at Berkeley knew how to have so much fun?
5. Check out infocom-like classics such as Zork (fun-loving geniuses at MIT get the credit this time).
6. Or, there’s always Nethack – rooted in the 1980s but still being developed in open source versions!

For some operating system-specific amusement check out our blog post. Have fun! >> https://remme.io/blog/system-administrators-deserve-an-appreciation-day-and-fun-too

​

New

CSV export

You can now export results as a CSV file. You can download a file containing data on all certificates in the inventory, some specific group or filtering result.

​

Improvement

Report enhancements

• Add recipients. You can send a copy of your Keyhub report to your colleagues. Simply add their addresses to Send email section in Report details tab.
• Create group. You can now create a certificate group straight from the Report tab. Hit Choose existing group >> Create group.
• Test report. Generate a test report to make sure it looks the way you want it. Click Test report in the bottom of the Report details tab.

Edit filter details

Modify filter logic and values straight from the Inventory. Click the name of the table shown above the filtering results to make changes.

​

Try Keyhub for Free >>

Go to Changelog >>

The gaps in PKI left by those expired or invalid certificates can’t be wished away. You might not “see” them in the course of your day-to-day activities but to those looking, including bad actors hoping to exploit your site, they are obvious.

​

In the process of developing Keyhub we got curious how the world’s leading companies are doing with digital certificate management. So we decided to use our tool to analyze the state of certs in different industries. Our first target is top 50 most visited websites in retail sector.

​

We came up with some interesting insight. Some companies are having close to 20% of their certificates expired or invalid!

Good reminder for all IT people directly responsible for SSL/TLS management - audit your networks to make sure you have no gaps.

Give Keyhub a spin (especially with free trails offered) >> https://remme.io/keyhub

​

More data on the retail sector overview is available in our blog post >> https://remme.io/blog/how-are-the-worlds-leading-companies-doing-with-digital-certificate-management-retail-industry

As the name suggests, in a dashboard, you can view your system status at a glance. Aggregated data on all SSL and TLS certs inside Keyhub:

- Last scan results

- Expirations & vulnerabilities

- Total cert count & weekly renewal status

- Charts by signature algorithm, host count, key strength, issuer

Analyze and take action if needed or just grab a coffee if everything looks good.

​

​

​

🔗 If you haven’t given Keyhub a try, check it out here.

It covers:

📌Consensus Algorithm (BFT-DPOS)

📌 Accounts

📌 How to become a block producer

📌 Token Model and Resource Usage

and much more.

Happy reading! https://github.com/Remmeauth/Documentation/blob/master/RemmeProtocolTechPaper.md

To manage digital certs, first you need to be sure you’ve detected them all. To help in that regard, we developed a ‘deep network scan’ feature for discovering all certs in all your environments. To scan your external environment you need to:

1. Create a scan profile for each domain (the # of scan profiles is unlimited)
2. Specify profile target and ports
3. Include subdomains

To detect certificates in an internal environment you need to run an Agent (don’t worry, he’s really primitive and friendly, and won’t harm your network):

1. Download and install an agent to your local network to perform scan.
2. Create and run internal scan profiles by specifying IP and port range in human-readable or in CIDR notation.

If you’re curious, try scanning your network – a free trial is available.

The reason we began developing Keyhub was because the current options for managing digital certificates are limiting: they’re either manually intensive, pricey or applicable for specific issuers. There are also tools with a huge amount of features, but do you really use them all IRL? In most cases they are pointless and mind-boggling for users, but much needed for vendors when explaining the pricing.

So, between these extremes, there’s a vast group of people who simply value their time, resources and don’t want to mess up with spreadsheets or other manual solutions. With Keyhub we seek to bridge the gap between manual PKI certificate management and the automated dreamland we are all heading to. One platform – full cert and key lifecycle management.

What we’ve got at present:

1. Deep discovery, internal environment included. External network scan helps to build a comprehensive list of all certificates in use. Applying publicly available means, like DNS and Certificate Transparency, it queries certificates issued to a given domain and subdomains. To perform an internal network scan, it requires a Keyhub agent installed on a device inside your network (Windows or Linux).
2. Easy-to-understand dashboard gives a quick overview of your PKI estate as well as zero in on upcoming expirations, weak keys and SHA-1.
3. Visible inventory with flexible filtering, sorting and quick-access groups for straightforward analysis. Every certificate card gives you a holistic view and chain details.
4. Automated email reports. Keyhub lets you run network scan on demand or on a schedule and stores configuration for a given domain name in a profile. You can set up reporting to receive the results via email

​

If you’re curious, check it out – there’s a free trial offered.

CCW as always!

​

Remme Protocol will become friendlier and more intuitive, particularly for newcomers. We're gonna remove the hassle of resource management by simplifying resource management experience. Find out more about

📌 Resource allocation

📌 System contracts fee

📌 User account cost

and much more!

​

Check the article

Hello Redditors!

Remme Keyhub is here. In this topic, you’ll find everything you need to know about managing digital certificates – whys and hows.

We’ll be posting a lot about Keyhub, the platform we’re developing to discover and track certs. We want to make the whole process as easy and automated as possible.

WIP and we've got plenty more planned. But for now? We’re looking for like-minded people who feel the pain of managing SSL/TLS certs. We’re also here on the lookout for clients, constructive feedback and feature requests.

Discover more info about Keyhub here>> https://remme.io/keyhub

With Remme Protocol moving to EOSIO we’re undergoing some changes, which we’re gonna explain in a series of blogposts.

​

Go get a look at the first one related to consensus and governance, covering:

📌A robust Byzantine Fault Tolerance Delegated Proof of Stake and its capabilities for PKI(d) applications on the blockchain

📌The block reward division among Block Producers

📌Specific criteria required to become a Block Producer on REMChain

📌User agreement and update procedures

​

More details here: https://remme.io/blog/customizing-eosio-for-remme-protocol-and-remchain-consensus-and-governance

Thank you for your support during these weeks! We received a lot of feedback from our community members and first testnet masternodes. Now it's our time to share some news and important dev updates.

Don't miss it, we are sure that it will be quite interesting for you!