Herding Certs - How to Automate Certificate Management
summary
Claims certificate inventories already dwarf user IDs (machine identities 45:1) and a client has ~1,000 public certs and roughly a million internal ones; two orgs lose HSM access and rebuild PKI. Advice: define CP/CPS roles and naming metadata, prioritize critical systems, expect a regulatory push and quantum readiness in ~5 years. Tools and patterns that work: CLM (Keyfactor, Venafi), public CAs (DigiCert, Entrust), ACME/SCEP, MDMs (Jamf/Intune) with ServiceNow integration for auto enrollment and staged renewals (45/30/15 days).
AI-written summary · about
chapters (12)
- 0:00Certificate management challenges
- 1:24Industry trends and automation drivers
- 8:08Machine identities growth
- 15:56Quantum cryptographic needs
- 16:38Certificate policies and procedures
- 22:39Key roles in management
- 25:16Metadata for tracking
- 27:45Certificate use cases
- 32:06Lifecycle solutions overview
- 36:58Auto enrollment strategies
- 41:33Implementation best practices
- 43:00Q&A
related talks
27mScaling Trust: CLM Roadblocks on the Path to Post Quantum Resilience
14mAutomated (PKI) Infrastructure: The AI You Should Be Thinking About
56mSecure and increase mobile workforce productivity with AWS for MDM
27mAddressing the growing threat of non-human identities with PKI
13mAutomating Certificate Management with
36mYou Like It Or Not; You Need It! - PKI And Certificate Management
23mELI5: Implementing Digital Certificates for a Post-Quantum World
32mPractical Insights from Following NIST SP 1800-38B