Keyfactor is the leader in cloud-first PKI as-a-Service and crypto-agility solutions. Our Crypto-Agility Platform empowers security teams to find, control, and automate every machine identity with Keyfactor. We help our customers apply cryptography in the right way from modern, multi-cloud enterprises to complex IoT supply chains. With decades of cybersecurity experience, Keyfactor is trusted by more than 500 enterprises across the globe.

Deploying PKI is far from what it used to be. Today, trust requirements, migration, specialized use cases, and hybrid environments are all key drivers for the use of multiple PKI and CA deployments. So, how do we balance the demand for scale and performance with need for trust and control?

In this session on Back to Basics: Simplifying PKI in Complex IT Environments, Ted Shorter, Chief Technology Officer (CTO) at Keyfactor will share insights into how the PKI landscape has evolved and how organizations can maintain governance, visibility and control in modern hybrid and multi-cloud environments.

Key takeaways will include:

-Emerging use cases: PKI in DevOps, IoT identities, Zero-Trust architectures
-How PKI requirements differ between private, public and cloud-based CAs
-How enterprises can scale PKI to meet on-premise and cloud requirements
-Why crypto-agility and root of trust management are the keys to success


Originally presented at PrimeKey Tech Days 2021.

Back to Basics: Simplifying PKI in Complex IT Environments

Machines already outnumber the humans on your network, which means every machine needs a trusted identity. Consider IoT devices, mobile devices and software-defined workloads and applications – trusted identity for each and every machine is critical.

As zero-trust and multi-cloud architecture become the norm, the role of machine identities in enterprise IAM (identity and access management) has reached critical importance – each needing to be managed and protected. The stakes are high, and keeping ahead of outages, key theft or misuse and internal and regulatory audits is a serious challenge.

In this webinar, our panel will discuss:
· The use (and misuse) of machine identities in organizations today
· Implications of machine IDs on data privacy and protection
· Strategies and recommendations to manage machine identities
· How to operationalize your strategy with a Crypto Center of Excellence (CCoE)

Machine ID Management & Digital Transformation: Building a Secure Future

Today, hybrid and multi-cloud are the norms. The increasing volume and velocity of digital certificates in these complex environments demands a highly scalable and automated approach.
 
That's where Keyfactor can help.
 
In this discussion and demo, Eric Mizell, VP of PKI Solutions Engineering, and Alex Gregory, Senior Director Cloud & Managed PKI, will share how Keyfactor delivers end-to-end certificate issuance, management, and lifecycle automation backed by highly scalable private PKI with EJBCA.
 
Join this live demo to learn how to:

- Easily issue digital certificates from EJBCA Cloud
- Quickly create multiple root CAs or PKI hierarchies on a single EJBCA cluster
- Generate new CA hierarchies quickly to meet any demand without requiring more servers
- Manage certificate lifecycles with inventory, control, and automation

Achieving End-to-End Certificate Management with Keyfactor and EJBCA

To help celebrate Cybersecurity Month, Keyfactor and Perimeter 81 are seeking to make it easier for businesses to understand how to stay ahead of digital identity and security trends. 

The digital world is moving faster and faster, powered by automation, powerful connectivity, and smart technology, purpose-built to make life easier. However, as the world becomes more connected, efficient, and intelligent, new challenges emerge for how to remain secure. In this new era of digital security, organizations must be vigilant and proactive when protecting critical resources, data, and digital identities. But most available services are unable to provide a robust security solution with the ability to scale quickly without disturbing operations or the bottom line. 

How do businesses and organizations secure, scale, and manage their digital business security and identities?

In this webinar, Keyfactor, a leader in PKI as-a-Service and machine identity management, partners with Perimeter 81, a leader in zero trust network security, for an exciting new digital security discussion. Daniel Goldfeld, VP of Customer Success of Perimeter 81, and Ryan Yackel, VP of Product Marketing of Keyfactor, come together to share how businesses can overcome their challenges with scale, and complexity for safer business and enterprise security.  

What will they discuss? 
- The State of Digital Identity and Security Trends
- Machine Identity Management
- Zero Trust Technology for The Modern Business

How To Stay Ahead of Digital Identity and Security Trends

Today, IoT solves pressing business problems across many industries. Early adopters of this technology—such as healthcare, smart cities, building management, utilities, transportation, and manufacturing—are attesting to its many benefits. These systems are built for longevity and scale through integration with the cloud. This expanded perimeter can create a large and lasting attack surface. It is therefore critical to ensure that security is embraced within each step of an IoT lifecycle.

In this Remote Session webcast, Blake Wood, Director of Alliances at Thales, and Ellen Boehm, VP of IoT Strategy and Operations at Keyfactor, will walk you through a comprehensive framework for a scalable IoT lifecycle and discuss the importance that Zero Trust, PKI, and signing play in securing this process.

Originally presented as a SecureWorld Remote Session.

IoT Lifecycle: Securely Capturing the Power of Connectivity

This recording includes two sessions originally presented at IMC IoT Days: Fall 2021:

Spotlight Session: Best Practices for Securing IoT Connectivity presented by Luc Vidal-Madjar, Head of IoT Solutions, BICS
Panel Discussion: Securing Critical Infrastructure with IoT Solutions moderated by Matt Hatton, Founding Partner, Transforma Insights with featured panelists:

- Ellen Boehm, VP of IoT Strategy & Operations, Keyfactor
- Nils Gerhardt, Chief Technology Officer, Utimaco
- Sridhar Ramachandran, Senior VP and CTO, Somos

Original presentation took place on September 20, 2021.

The Connected Device Economy

Machine identities are everywhere. From cloud services, containers, and applications, to the code running on them, every machine needs a trusted identity.

But with the rapid increase in machine identities, many security and infrastructure teams are left with an uneasy feeling of not being in control. The stakes are high – keeping ahead of certificate outages, key theft or misuse, and audits is a constant challenge.

The result? 88% of organizations still experience serious outages due to expired certificates. Another 89% of organizations experienced at least three failed audits due to insufficient key management.
In this webinar, you’ll learn:
• Why crypto-agility emerged as a top priority for organizations
• Key risks and challenges in managing machine identities
• How to build a case for prioritizing machine identity and reduce risk of unmanaged machine identities
• Steps for building a Crypto Center of Excellence (CCoE)

New Strategies for Managing Machine Identities

PKI isn't what it used to be. Today, enterprises need to support multiple public and private CAs to match the unique demands of various use cases, trust requirements, and hybrid cloud environments.

With this transition comes the need to manage thousands of machine identities and short-lived certificates at hyper-scale across any CA, on-premises or in the cloud. Many PKI and security teams struggle to find a balance between agility and control, as they're forced to adapt to this new reality.

In this discussion and demo, Shian Sung, Director of Solutions Engineering, and Ryan Sanders, Sr. Product Marketing Manager, will share insights into how PKI deployments have evolved and what your team can do to consolidate visibility and governance in hybrid and multi-cloud environments.

What we will cover:

-Key considerations for PKI deployments on-premises and in the cloud
-Common risks and challenges we see in real-world customer environments
-How requirements differ between public, private and cloud-native CAs
-How to adopt a modern, multi-cloud PKI strategy

Managing PKI in Hybrid and Multi Cloud Environments

Microsoft Active Directory (AD) PKI is widely used by enterprises today, yet it has largely flown under the radar of attackers and defenders – until now. Recent research by SpecterOps reveals common user misconfigurations in AD CS that, if left unchecked, create serious security blindspots that attackers can abuse for credential theft, domain escalation, and persistence. 

Join leading Red Team & PKI Experts from SpecterOps and Keyfactor as they discuss the findings of the report, “Certified Pre-Owned: Abusing Active Directory Certificate Services.”  

In this discussion, they’ll cover: 

-What AD CS is and how it works 
-Common AD CS misconfigurations 
-PKI architecture and implementation flaws 
-Defensive advice and best practices to mitigate attacks

PKI Meets Red Team: Revealing Common Microsoft AD CS Misconfigurations

Are your PKI operations running as smooth as butter? If your answer is no, then this webinar is just what you need to learn how to accurately analyze the health of your crypto-agility readiness.

Most organizations aren’t aware of how many certificates and keys they have under management, or worse, not under control. Without an accurate inventory, organizations will experience more outages and have a greater risk of an attack or failed audit. But, getting an inventory is just the tip of the iceberg when it comes to the PKI and certificate management reporting metrics that matter.

Join Sami Van Vliet, Principal Technical Product Manager, and Ryan Yackel, VP of Product Marketing, as they share practical advice for tracking your machine identities.

You’ll learn:

-Why identifying key metrics is important to your PKI operations running smoothly
-What metrics are worth tracking when it comes to machine identity management
-How to create a baseline for must-have metrics

Preparing for Crypto-Agility: The Top 10 PKI Metrics You Should Care About

Cryptography is now critical infrastructure for digital business as it is the foundation for digital trust. As the world digitally transforms non-human or machines will rise to conduct and transact critical elements of business and society. Yet, all of this hinges on PKI, and cryptography; and it must be orchestrated, managed and automated. For years, many security leaders have struggled to manage all the mission critical systems that rely on cryptography. And with new use cases such as cloud, DevOps, and RPA, the situation is further complicated making life even more difficult for security and IT leaders. Join this session to learn how and why cryptography is now critical infrastructure.

How PKI, Crypto and Machines make the Digital World Go Round

Google Cloud’s Certificate Authority Service makes it easy for DevOps and Infrastructure teams to rapidly issue certificates into the cloud, without the complex PKI setup. However, the next challenge becomes how to manage these certificates at massive scale.

Keyfactor integrates directly with Google CA Service to provide real-time inventory, monitoring, and automated workflows for every certificate. That means your teams can be more productive, avoid preventable outages, and streamline PKI management as you scale up.

Join Gary Noe, Sr. Integrations Engineer, and Ryan Sanders, Sr. Product Marketing Manager, for a 30-minute discussion and live demo of the Keyfactor CA Gateway for Google CA Service.

In this webinar, we’ll cover:

-The challenges of managing CAs in hybrid and multi-cloud environments
-How to leverage Keyfactor and Google for highly scalable, hybrid PKI
-A live demo with Google Cloud CAS and Google Cloud Load Balancer

Scaling PKI in the Cloud with Keyfactor & Google CA Service

The Internet of Things (IoT) is transforming the world we live in at a rapid rate – and it isn’t slowing down. Billions of network-connected devices are deployed into mission-critical environments such as medical devices, industrial and manufacturing control systems, and built-in vehicle sensors.  

As more stringent customer requirements emerge and the regulatory landscape evolves, manufacturers must address security concerns like authentication, data encryption, and integrity of software and firmware on their devices. Ensuring that IoT solutions meet these key requirements is not only critical for today’s threats, but also for future product and security lifecycle challenges.  

With the emergence and continued growth of IoT, Public Key Infrastructure (PKI) has become an instrumental tool in securing the next generation of industrial and consumer-connected devices.  

Join Ellen Boehm, VP of IoT Strategy & Operations at Keyfactor, and Damon Kachur, Senior Director at PrimeKey, as they take your questions live and discuss: 
 
-Digital transformation and what it means for device manufacturers 
-Changes in the regulatory landscape and what security standards manufacturers should be aware of to continue deployment of their connected devices 
-How embedding security in connected devices using cloud-based PKI can become a competitive advantage for your business

Securing Devices with Cloud PKI: Your Questions Answered by IoT Security Experts

From IoT and mobile devices to software-defined applications, cloud instances, containers, and even the code running within them, machines already outnumber humans. The criticality of machine identity management propelled Gartner to recognize it as a new category in their 2020 Hype Cycle for Identity and Access Management Technologies report:

“This is a new profile that reflects an increased need to manage cryptographic keys, X.509 certificates that are used to establish trust in the identities of machines, such as IoT devices, virtual machines, containers, and RPA bots”, said Ant Allen, Gartner Analyst.

With the emergence of machine identity management as an industry-recognized term, it is more crucial than ever for organizations to manage and protect these identities.

To see real-world Machine Identity Management in action, join Ryan Yackel, VP of Product Marketing, and Toby Gaff, Director of Solutions Engineering, for a demo and discussion of how Keyfactor Command enables full visibility, control, automation and orchestration.

In this 30-minute webinar, you’ll learn:

-How to get a continuous inventory of your machine identities
-How to automate identity lifecycle
-How to extend machine identity management with other tools (e.g. HashiCorp Vault, Istio)

Real-World Machine Identity Management in Action

Companies are now deploying billions of network-connected devices into mission-critical environments, such as medical devices, industrial, and manufacturing control systems. 

However, as more stringent customer requirements and regulations emerge, manufacturers must address security concerns, such as authentication, data encryption, and integrity of software and firmware on their devices.

With the emergence of IoT, PKI has become an instrumental tool in securing the next generation of industrial and consumer-connected devices. In this session, Keyfactor’s VP of IoT Strategy and Operations, Ellen Boehm, and Senior Product Marketing Manager, Ryan Sanders, will discuss:

Security challenges that IoT developers and device manufacturers face
How PKI can address challenges with complex supply chains and product lifecycles
Considerations for design, deployment and management of PKI for IoT devices

PKI for IoT: How to Secure Connected Devices from Design to End-of-Life

The IAM practices of long-standing organizations were built for rigid structure and slow, predictable changes. The seismic shift to dynamic workloads, rapid change, agile business, and the like puts tremendous strain on these systems. This is especially true for the massive scale and high velocity of machine identities, which are growing exponentially across organizations. We will reveal the underlying problems with managing machine identities and propose strategies and tactics to overcome operational challenges and security risks.

Achieve IAM Agility for Machine Identities

Securing vehicles is hard – perhaps harder than just about any other device. Don’t take our word for it. A simple internet search reveals that all major automobile manufacturers have experienced a vehicle security exposure.

Join Keyfactor and wolfSSL for a Live Q&A with VP of IoT Strategy, Ellen Boehm, and Engineering Manager, Chris Conlon, as they discuss embedding strong cryptography into vehicle and IoT devices:

-Unique security challenges that engineers face when securing connected vehicles
-Address the role that cryptography plays in securing vehicles
-Practical advice on how these same principles can improve security for other connected IoT devices where high assurance and scalability are a must

Navigating Vehicle and IoT Security: Your Questions Answered by Crypto Experts

There has been an awakening for the importance of modernizing cyber security infrastructure --- and it’s about time. 

On May 12th, President Biden signed an Executive Order (EO) to “improve the nation’s cyber security and protect federal government networks.” This EO comes shortly after the recent Colonial Pipeline ransomware attack and previously cyber security incidents that affected both SolarWinds and Microsoft Exchange.
 
The EO touts modernizing critical infrastructure with Zero Trust Architecture and improving supply chain security. But what does this mean for both the public and private sector?  Where does the role of securing machine identities play in building stronger standards? 

Join Keyfactor's Ellen Boehm (VP of IoT Strategy & Operations), Ted Shorter (CTO & Co-Founder), and PrimeKey's Tomas Gustavsson (CTO & Founder of EJBCA) as they break down the most important sections of the EO and answer your questions on where cryptography plays a role in securing our nation for the future.

Biden's Cybersecurity Executive Order: Your Questions Answered by Crypto Experts

It’s not the SSL/TLS certificates you track that cause issues – it’s the certificates hiding in your network, beyond your visibility. The problem is that most organizations don’t know where all of their certificates live, who uses them, and most importantly, when they expire.

All it takes is one unexpected expiration to create a costly network or application outage. So how do you keep track of every certificate in your inventory? The path to success starts with discovery.

Join Sami Van Vliet, Principal Product Manager, and Ryan Sanders, Product Marketing Manager for a 30-minute discussion and live demo of the 3 simple ways that Keyfactor gives you complete visibility of all certificates in your inventory, regardless of where they were issued from or where they live.

How to Take Control of Your SSL/TLS Certificate Inventory

Lifecycle Management

Cyber Security

Enterprise Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

How to Take Control of Your SSL/TLS Certificate Inventory

Presented by

About this talk

More from this channel