Fully integrate your Smart Card into Windows, Mac, Linux and Mobile with Charismathics CSSI Middleware

CSSI Features

Features of the Charismathics CSSI Smart Card Middleware
Enterprise Class

Since 2005 - Used at some of the largest enterprise smart card deployments in the world.

Multi Vendor

Supports cards from all major Smart Card vendors, avoiding lock in to a specific product.

Legacy Card Support

Simplify migration of legacy cards from all major vendors with just a single middleware solution.

App Feature Image
Multi Platform

Fully Windows Compliant plus support for Mac, Linux, Embedded and Mobile platforms.

Application Support

Supports a wide range of applications through standard interfaces inclusing Windows CAPI, CNG and PKCS11

Virtual Smart Card

Fully integrated with Charismathics VSC Virtual Smart Card, including support for TPM and IPT

Smart Card Middleware

An Essential Security Component for your Strong Authentication Project

Charismathics CSSI Smart Card Middleware enables the secure storage and use of digital certificates and their associated keys on a Smart Card, Virtual Smart Card or USB Token. Charismathics CSSI supports a wide variety of applications, including PC Logon, remote authentication, email signing and encryption.

Charismathics CSSI handles the interface with the card, and integrates into the computer Operating System or Application using a standard such as Microsoft®Crypto API / CNG on Windows, and PKCS11 on Windows, Mac and Linux.

Enterprise Class Solution

A robust, fast and feature rich solution

Charismathics has more than 10 years experience providing middleware to some of the largest Enterprise Smart Card projects in the world. As a result CSSI is a mature, reliable and full featured Smart Card Middleware solution specifically well suited to Enterprise requirements.

Charismathics CSSI fully supports Windows Enterprise CA. As well as all Major Card Management Systems. CSSI can be configured to meet the security requirements of specific projects, including PIN management, caching and pass through, Certificate de-registration, Certificate expiry notification, and many other enterprise features.

In addition, CSSI is blazing fast. No more waiting for certificates to load, and transactions to complete.Typical applications include User logon to a Windows Domain, TLS Server Authentication, Smart Card redirection for Remote Desktop and VDI, S/MIME email encryption and Email Signing, BitLocker data encryption, FireFox browsing, and most other applications that use Digital Certificates.

For Complex Integrations

Ideal for large scale projects with complex integration and migration requirements

Enterprise Smart Card deployments can be complex. CSSI can be configured and extended to meet the requirements of complex projects. CSSI supports a large number of legacy cards, enabling a migration without the additional complexity and cost of supporting old Smart Card software.

CSSI supports varied workflows and issuance scenarios, including central issuance and self-service. CSSI supports multiple platforms, including Windows, Mac, Linux, Embedded, and Mobile. And Charismathics provides the technical and development support for

CSSI Versions

Different Versions of CSSI for different types of deployments


Version for the US Government PIV standard, including support for Department of Defense card (CAC), US Government Card (PIV) as well as SIPR, PIV-I, PIV-C and CIV.


Version for European Signature Smart Card standard. Support for all major card vendors, including Oberthur, Gemalto and Sagem.

CSSI Professional

Version for Charismatics Card profiles, including the CSSI Corporate and PKCS-15 profiles as well as the Charismathics TPM based Virtual Smart Card (VSC)

CSSI for Enterprise

Version for Integrators and Large Enterprises that need to support both legacy and new cards. Support for Charismathics profiles, PIV, IAS-ECC, as well as legacy cards from all major smart card vendors.


Version for OEM manufacturers, including support for thin clients, printers, scanners, embedded operatings systems and Android devices.


Version for card Issuers that enables the creation of cards, and the loading of card data. Well suited for small PIV Card deployments, and for testing.

Need more information about CSSI?

Read more information on our technical support site, or contact a person.