Can anybody recommend a X509 managment appliance? The needs are rather basic, it should provide secured storage of private keys and the certificates for users and hosts, offer an overview of certificate expiration (with renewal workflows defined) and all that possibly over some kind of web interface. Ideally the certificates could be stored on a HSM or something similar. There's currently no CA in place that needs to sign etc only a subordinate RA and this appliance should mainly act as secure storage of certificates in case of loss on user/host side but offer ease of management. Anyone ever seen this kind of thing or maybe someone could recommend a product? I don't wont to keep keys printed on paper stored in a safe.
Depending on how much you are ready to spend, you may be interested on key management applinces from any of prominent hardware vendors in this area. Here is one example.
You could consider using Mozilla's NSS Software Security Device.
The easiest way to do this is to import your PKCS#12 files into your certificate store in Thunderbird or Firefox. Of course, it will do more than you need, but the interface isn't too bad: it will allow you to sort your certificates per CA, CN and validity time.
I haven't tried, but it might be possible to have a standalone interface for this running with XUL runner too.
(Of course, set a master-password for this.)