Implementation of CSSL System in the Cloud

This document is a technical report detailing the implementation of the CSSL system in the cloud for Clalit, the second largest HMO in the world. The report outlines the challenges faced by external suppliers in the certificate generation process, which previously required complex steps such as creating a CSR and integrating signed certificates. The new portal created by COMDA simplifies this process, allowing suppliers to generate certificates by entering basic information. A Data Power representative verifies and approves the certificate, which is then signed by COMSIGN. The report highlights the operational efficiency gained, including reduced burden on Clalit’s API Security team and enhanced support for suppliers. It also emphasizes the increased security of the new process, which allows for certificate validation with an external PKI. The document includes feedback from Dvir Nave, Head of API Security Team & Data Security at HMO Clalit, regarding the positive impact of the new system on service quality and response times.