
Overview
vSEC:CMS streamlines all aspects of a credential management system by connecting to enterprise directories, certificate authorities,IdPs, physical access control systems, email servers, log servers, biometric fingerprint readers, PIN mailers and more... With vSEC:CMS, organizations can quickly and easily deploy physical and virtual smart cards, badges, Windows Hello for Business (WHfB) and USB tokens (such as Yubikeys , Feitans, Thales, G+D, Swissbit and more) to employees. vSEC:CMS enables personalization and management of these authentication credentials instantly from AWS. The credentials can be of the type PIV/PKI, FIDO2 device bound-passkeys and RFID and in any combination.
Highlights
- Manage the Lifecycle of USB Tokens, Smart Cards, Windows Hello for Business (WHfB) and Virtual Smart Cards
- Manage and enroll FIDO2 device-bound passkeys into Entra ID, Okta, PingIdentity, Thales STA, Entrust IdaaS and other IDPs.
- Security device orchestration for FIDO2, PKI and RFID
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
No refund. Fully featured demo version available for evaluation.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
System management / configuration
A new server status console has been added to allow maintenance tasks.
Process CPU usage information has been added to the log files.
A new system health status has been added to report when the MS-SQL server HD is full.
A new command line parameter has been added to generate new OSKS data.
It is now possible to issue multiple operator credentials for the same user ID.
The build-in default role permission list has been updated.
It is now possible to configure vSEC:CMS User application permissions via GPO for the whole computer
The functionality for load tests has been improved.
The vSEC:CMS Agent/Admin installer has been changed to install the Agent application together with the Admin application.
A new support task has been added to synchronize the license counter on the vSEC:CMS applet when using a fully featured operator card.
Entra ID
Batch issuance with file import now supported with Entra ID.
The Entra ID connector dialog box has been updated.
Support for national clouds of Entra ID has been added.
Printers
Support for MATICA XID8300 printer with contact less only encoder configuration has been added.
The support for MATICA EDISecure printers has been improved.
FIDO2
The FIDO2 passkey details are now shown in the credential overview on the lifecycle pane.
It is now possible to reset the FIDO2 applet using HID interface Actions > FIDO2.
PKI
Support for the AD ObjectSID attribute has been added for Microsoft CA.
Performance
Caller statistics are now collected in the CmsService.dll.
Add number of concurrent open system resLock to perfmon data.
Credentials
Support for Thales Safenet IDPrime FIDO2.1 EE
Support for batch issuance of Thales IDPrime Virtual
Support for RFID mapping to Thales IDPrime Virtual
Others
The following 3rd party modules have been updated: OpenSSL 3.0
The user ID format is now configurable for IDPV token names.
Making configurable to determine user AD account name during user self service issuance.
The dialog to generate AD password reset codes is now available in the vSEC:CMS Agent application.
A new support task has been added to export all diversified PUC values.
Additional details
Usage instructions
This virtual machine comes with vSEC:CMS ready for usage instantly. vSEC:CMS runs fully functional for 10 Credentials in evaluation mode. You can evaluate and configure your use case in your environment before purchasing licenses. You can acquire the needed license from Versasec or any of our partners. Start the configuration by following the guides on our support portal. Some of the first steps would be to connect to your on prem or cloud CA server and your user directory.
Once the instance is running you need to RDP to the virtual machine to start the configuration. Refer to following guide: https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/connecting_to_windows_instance.htmlÂ
Resources
Vendor resources
Support
Vendor support
Online Ticket, Phone, Onsite support@versasec.comÂ
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.