X9 Financial PKI: PQC Readiness and Crypto-Agility for Financial Services
summary
X9 launches a Financial PKI with a vendor-hosted root, issuing CAs, RA, repository and OCSP/CRL; architecture supports TLS, device and transaction use (ATMs, POS, ISO 20022 messages) and flexible lifetimes (some device certs may run ~10 years). An RFP goes to over two dozen bidders and receives three submissions; a vendor is selected but MSA is unsigned. The program defines 34 use cases, mandates a PQC-ready requirement, and inserts a pre-audit CPS‑to‑X9 policy compliance check before WebTrust auditing and production.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:26Speaker introduction
- 3:35X9 standards overview
- 7:11PKI standards history
- 9:22X9 PKI study group launch
- 11:51Financial PKI RFP process
- 13:55Financial PKI architecture
- 16:20Q&A: End-entity certificates
- 18:09Q&A: Subordinate CA rules
- 20:17Q&A: PKI use cases
- 21:00Q&A: Post-quantum readiness
- 22:06Q&A: Regulatory interest
- 22:51Q&A: Standard vs Financial PKI
- 24:02Q&A: Certificate lifecycle
- 24:45Q&A: Multiple certificate paths
- 25:47Q&A: PKI infrastructure future
- 26:29Q&A: OASIS PKI comparison
- 27:54Q&A: PCI and audits
related talks
44mPQC at the Internet Engineering Task Force IETF
15mOne App at a Time: DigiCert's Practical Playbook for the Post-Quantum Transition
26mCrypto-Agile PKI: A Strategic Blueprint for Post-Quantum Trust
27mHow ETSI is Preparing for PQC
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
39mPQC in Action: From Global Standards to Secure Deployments
39mPQC at the European Telecommunications Standards Institute ETSI
30mBuilding Your PQC Lab: Trust But Verify Your PQC Ecosystem