carillonfedserv.com

What It Is

Carillon Information Security Inc. provides PKI digital credentials, trust validation software, managed PKI, and consulting services, with a focus on aviation, defense, government projects, and supply chain identity management. Its solutions cover certificate issuance for users, devices, tablets, and other identities, and can be used for secure physical access, enterprise network login, electronic document signing, email signing and encryption, and partner portal access.

Core Capabilities

In terms of protection type, Carillon is not a traditional firewall or EDR product. Instead, it centers on PKI, public-key certificates, and trusted identities to address authentication, signing, encryption, and access control. Its credential products include supply chain digital certificates, PIV-I credentials, and e-Boarding Pass Signing Certificate. On the software side, it offers Pathfinder SCVP Client/Server/Web Proxy, a SiteMinder plugin, Radius Server, Outlook plugin, and more, which can integrate with PACS, LACS, and web portals for certificate trust validation.

Deployment, Compliance, and Management

Deployment options include managed PKI, private-label Certificate Authority services, online services, and on-premises or integrated software components. Compliance information is relatively extensive: the materials mention CertiPath cross-certified certificates, FIPS-201-compatible PIV-I credentials, Spec42-compliant credentials, and scenarios related to FAA/EASA/Transport Canada electronic authorized release certificates. For management, Carillon emphasizes credential issuance, certificate policy, PIV-I management, and consulting support, but there is no detailed information on alert centers, audit reports, SIEM integration, or API automation.

Pricing, Pros, and Cons

Pricing is not publicly disclosed. The only stated claim is that Managed PKI can save up to 80% compared with building an enterprise PKI in-house. Its strengths are a clear industry focus and coverage across credentials, software, managed services, and consulting, making it suitable for building high-trust identity systems. It also claims it can issue credentials within weeks, reducing the long timelines associated with traditional cross-certification. The main drawback is that public information is mostly solution-oriented, with limited details on pricing, SLA, support tiers, console capabilities, and security operations.

Best Fit and Access from China

Carillon is better suited to airlines, MRO providers, Boeing supply chain members, defense and aerospace companies, state and local governments, and organizations that require PIV-I/FIPS-201-compatible credentials. Its accessibility from China is unknown, and supported payment methods are not disclosed. If local procurement or compliance implementation in China is important, it may be worth evaluating local PKI/digital certificate providers such as CFCA and 天威诚信. International alternatives include DigiCert, Entrust, GlobalSign, and Sectigo.