SYNRION x.ID · KNOWLEDGE JOURNEY

Experience YubiKey lifecycle management—from a secure start to Enterprise Trust.

One security key can support multiple identities and use cases while one controlled lifecycle keeps assignment, policy, recovery and growth connected.

Start the lifecycle Request an x.ID demo

x.ID explained · Questions & answersFrom PIV attestation to multi-CA

THE KNOWLEDGE JOURNEY

Four chapters. One continuous identity lifecycle.

Begin with the question closest to your current situation. Each chapter contains one operational entry and one deeper decision page.

01 · LIFECYCLE & RECOVERY

Issue, operate and recover

How do we manage a YubiKey throughout its complete lifecycle—even when it is lost?

Issue, operate and safely replace YubiKeys. Revocation, recovery and self-service stay connected. The central PIV/FIDO2 inventory view provides personal visibility and evidence for the company.

YubiKey Lifecycle ManagementYubiKey lifecycle management with SYNRION x.ID by keyONE: inventory and assign PIV tokens, guide user enrollment, renew certificates with new keys and revoke them when a key is lost.Open article ↗ Lost YubiKey: secure replacement and PIV attestationUse PIV attestation, identity verification and policy-controlled self-service to replace or enrol YubiKey hardware without losing accountability.Open article ↗ YubiKey inventory: PIV certificates and FIDO2 passkeysConnect certificates, discoverable FIDO2 credentials and identities in one central view. SYNRION x.ID links device inventory, company policies and lifecycle records. Repeated FIDO2 inventory requires supported YubiKeys with firmware 5.8 or later.Open article ↗

02 · EFFICIENCY & COSTS

Separate identities without multiplying tokens

How can several roles remain distinct on one security key?

Keep primary and secondary identities accountable, understand the hardware and cryptographic limits, and model the resulting token demand.

Multiple identities on one YubiKeyKeep a primary identity and controlled secondary PIV identities on one YubiKey without losing role separation, assignment or lifecycle control.Open article ↗ YubiKey scenario cost calculatorCompare one identity per YubiKey with a shared key per person: plan hardware, reserve and monthly management licences transparently.Open article ↗ Separate identities without multiplying tokensA guided journey through YubiKey lifecycle management, PIV attestation, multiple identities, scalable deployment and hardware-protected service identities.Open article ↗

03 · START & GROWTH

Start compact. Grow with your strategy.

Cloud-first, on-premises or hybrid—which deployment fits us?

Your own server or a CoreService in the cloud: Outpost connectors link directories, CAs and separated networks. The browser portal also supports mobile access.

Single-server x.ID with integrated CAStart SYNRION x.ID on Windows Server 2019 or later with Microsoft AD CS and SQL Server or PostgreSQL. No mandatory AD domain; optional HSM, with an agent locally or on a jump host.Open article ↗ x.ID in the cloud, on-premises and hybrid environmentsSYNRION x.ID follows your IT strategy: a web-based CoreService in the cloud or on-premises, Outpost connectors for distributed environments and a browser portal for desktop, tablet and smartphone.Open article ↗ Start compact. Grow with your strategy.A guided journey through YubiKey lifecycle management, PIV attestation, multiple identities, scalable deployment and hardware-protected service identities.Open article ↗

04 · ENTERPRISE TRUST

Control complex trust domains

How do human and service identities stay controllable across tiers, forests, domains, CAs and segments?

Connect distributed policy and lifecycle control with hardware-protected user, service and CA keys across multiple HSM providers.

Enterprise x.ID across tiers, forests, domains and CAsControl Active Directory and Microsoft Entra ID with human and service identities across multi-tier, multi-forest, multi-domain, multi-CA and multi-segment environments.Open article ↗ Service identities and HSM-protected private keysKeep private keys for services, gMSA accounts, Outposts and PKI workloads in supported HSMs while Windows CNG, KSP and applications use them through controlled paths.Open article ↗ Control complex trust domainsA guided journey through YubiKey lifecycle management, PIV attestation, multiple identities, scalable deployment and hardware-protected service identities.Open article ↗

THE PRODUCT BEHIND THE JOURNEY

SYNRION x.ID

Manage YubiKeys, identities, PIV certificates and FIDO2 centrally in a browser. SYNRION x.ID combines native Entra integration with cloud, on-premises or hybrid deployment through Outpost connectors. The portal also supports mobile access; the feature overview states release status and requirements.

View product

THE NEXT CONTROLLED STEP

See your own identity lifecycle in one controlled view.

We will map your current YubiKey, PIV, FIDO2, PKI and HSM environment to the smallest sensible x.ID starting point.

Request an x.ID demo