ZTmail Cryptographic Application Automation Gateway

One Gateway. Three Services. Fully Automated.

ZTmail Cryptographic Application Automation Gateway sits between an organization's existing security infrastructure, business systems, and external networks. It automates digital signing, encryption, decryption, signature validation, certificate management, and trusted identity management for email, chat, and documents, while working in conjunction with the corresponding systems already in place.

Built-in dedicated sub-CA and HSM-protected keys automatically issue and manage ZTmail-trusted S/MIME certificates and document certificates for the organization, without quantity limits.

Optionally for global-trusted S/MIME certificates and document certificates to meet global trust application needs.

Centralized management of private keys for email and document encryption.

Automate cryptographic operations for email, chat, and documents, including digital signing, encryption, decryption, signature validation, and timestamping.

Work with an existing email security gateway to decrypt and inspect inbound encrypted email, and inspect outbound email before encrypting it.

Work with existing business systems to automate bulk signing and encryption of business documents.

Employees can continue using their existing email clients and document readers without managing email or document certificates themselves.

One Gateway. Configurable to Meet Different Needs.

ZTmail Cryptographic Application Automation Gateway is an integrated, multifunctional gateway solution. Customers can select the functional components that best meet their specific application requirements, including an S/MIME Automation Gateway, a Document Cryptographic Application Automation Gateway, an Enterprise Instant Messaging Encryption Gateway, an Enterprise Key Management System, and a Timestamping Service System.

Don't Replace. Complete. Let Each System Do What It Does Best.
ZTmail S/MIME Automation Gateway Works with the Existing Email Security Infrastructure.

ZTmail S/MIME Automation Gateway adds the cryptographic application layer without replacing the email security systems already used. All employees still use their usual email clients, but now emails are automatically encrypted during transmission and storage.

Inbound

Decrypted by ZTmail Gateway
→ Security Inspection → Deliver

Outbound

Security Inspection → Signed & Encrypted by ZTmail Gateway → Send

Works with existing email security infrastructure.

Add S/MIME Automation. Keep Your Existing Security Infrastructure.

Document Cryptographic Application Automation Gateway

ZTmail Document Cryptographic Application Automation Gateway is designed for large and medium-sized organizations that need to digitally sign documents in bulk. It also provides the in-house document certificate issuance and key management required to support organization-wide document signing and encryption. The gateway automates document digital signing, timestamping, encryption, decryption, signature validation, and certificate lifecycle management.

Built-in dedicated sub-CA and HSM-protected keys automatically issue and manage ZTmail-trusted document certificates for the organization, without quantity limits.

Connect to ZTmail cloud cryptographic services to automatically obtain Adobe-trusted document signing certificates for use cases requiring global trust.

Centralized management of private keys for document encryption.

Automatically sign and encrypt PDF documents generated by business management systems in bulk.

Employees can manually sign and encrypt documents using ZTmail App.

An integrated timestamping system is optional and can provide local timestamping for document signatures.

Enterprise Instant Messaging Encryption Gateway

ZTmail Enterprise Instant Messaging Encryption Gateway is designed for instant messaging management in medium-sized and large organizations. Built on the organization's email infrastructure, it provides encrypted chat services for both internal and external communications. It also provides the in-house S/MIME certificate issuance, automated certificate management, and key management required to enable encrypted chat across the organization.

Built-in dedicated sub-CA and HSM-protected keys automatically issue and manage ZTmail-trusted S/MIME certificates for the organization, without quantity limits.

The organization has its own ZTmail trust domain, providing MV/OV/SV trusted email identities at scale, with globally trusted S/MIME certificates available as option.

Provide key management for encrypted chat and email; ZTmail App automatically retrieves users' keys from the gateway.

Support chats between ZTmail App users, and between ZTmail App and existing email clients.

Optionally provide other email clients with cryptographic services such as digital signing, encryption, decryption, and signature validation.

ZTmail Enterprise Key Management System (EKMS)

ZTmail Enterprise Key Management System (EKMS) is designed to provide centralized cryptographic key management for medium-sized and large organizations. Encryption keys are generated and managed within the EKMS. The ZTmail App retrieves employees' certificate keys from the EKMS for use on their local devices.

Built-in PCIe HSM card to protect keys through encryption.

Key lifecycle management, including generation, revocation, backup, and archiving.

Provide key management for email, chat, and document encryption.

Provide automated key backup and recovery.

ZTmail App automatically retrieves users' keys from the EKMS and uses its backup and recovery services. Keys are not automatically backed up to users' mailboxes.

Provides features like key usage management and statistical reports.

Deploy on the internal network; a hot-standby pair is recommended to ensure key security and reliable availability.

ZTmail Timestamping Service System

ZTmail Timestamping Service System is designed to provide local timestamping services for medium and large organizations. It comes with a built-in ZTmail-trusted timestamp signing certificate, offering timestamp signing services for batch document signing or other applications. It can also provide local timestamping services for employees using ZTmail App or other software.

Supports on-premises timestamping service in accordance with the RFC 3161 standard.

Includes ZTmail-trusted timestamp signing certificates by default to support timestamping.

Business management systems can connect locally to the timestamping service to efficiently timestamp business data and documents, helping establish trustworthy time evidence, non-repudiation, and tamper evidence.

ZTmail App can also connect to the timestamping service to automatically add local timestamping to document signatures.

If the purchased Document Cryptographic Application Automation Gateway does not include a timestamping system, it can connect to this service to automatically add local timestamping during bulk document signing.

From “Who Is This?” to an Actionable Security Signal S/MIME certificates can represent different levels of identity validation for each email. Document signing certificates can represent different levels of identity validation for each document.

Every Email, Every Document, Can Carry a Trusted Digital Identity.

Built-in CA for Your Organization. Public CA When You Need It.

ZTmail Gateway's built-in enterprise CA automatically issues and manages ZTmail-trusted S/MIME certificates and document certificates for employees across your organization. For a small number of mailboxes that need global trust for external communication, Gateway can automatically obtain globally trusted S/MIME certificates and document certificates from Public CAs.

Dedicated Hardware Cryptographic Infrastructure for Organizational Trust

ZTmail Cryptographic Application Automation Gateway is delivered as a dedicated hardware cryptographic appliance, providing a secure foundation for your organization's email and document trust domain. With built-in enterprise CA capabilities and hardware-protected CA keys, the Gateway automatically issues and manages organizational trusted and global trusted S/MIME certificates and document certificates for your organization.

One Gateway. Complete Cryptographic Lifecycle Management.