Name: Part 3 – Beyond ACME: Automating Certificate Management in Complex Environments
Start: 2025-11-02T20:23:00Z
End: 2025-11-02T20:23:39.000Z
Location: BrightTALK

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com.

The Cyber Resilience Act sets mandatory requirements for manufacturers to implement cybersecurity risk management, produce and maintain SBOMs and manage vulnerabilities across the product lifecycle. This session explains obligations and shows practical ways to embed resilience in development and deployment pipelines. It also highlights how preparing now supports readiness for future regulations such as the AI Act, creating innovation and business advantage. 

Key Takeaways:
 • Understand CRA requirements for software and device makers.
 • Learn how SBOM and vulnerability handling affect compliance.
 • See examples of compliance by design practices in action.
 • Foresight into upcoming regulations and frameworks, such as the AI Act.

Preparing for CRA: What Manufacturers, Developers, and Security Leaders Need to Know

The latest DigiCert RADAR data reveals more than attack trends, it exposes how the global internet is shifting beneath the surface. 
From coordinated botnet takedowns to sovereign DNS networks and the surge of hyperscale traffic events, these signals show where resilience, control, and trust are being redefined. 

In this insightful 30-minute fireside briefing, DigiCert experts share key highlights from this quarters Threat Intelligence Brief, decoding what’s driving the change and how organisations can strengthen digital trust across networks, applications, and DNS. 

Gain insights on: 
- How coordinated botnet takedowns are reshaping attacker behaviours, and what that means for the stability of global infrastructure 
- What the acceleration of sovereign DNS initiatives in Russia and China signals for digital trust, visibility, and governance 
- How mega-scale traffic events, including the Aisuru botnet, are testing the limits of resilience across interconnected systems

DigiCert RADAR: Threat Intelligence Signals Redefining Global Resilience

What makes SBOMs so essential? And how can organisations determine their role in meeting regulatory demands? While regulations may differ in specifics, they all share a common goal: fostering transparency, accountability, and security within your software 

In this webinar, we’ll explore how regulations like DORA, NIS2, and PCI DSS 4.0 are driving the need for software transparency and how SBOMs empower organisations.

The Role of SBOMs in Modern Software Development - Unlocking Compliance

This is the first session in our four-part series designed to deliver hands-on guidance for certificate automation focused on the tools and workflows IT and security teams use every day.

In this 30-minute session, we’ll lay the foundation for automating certificate management by walking through the installation and configuration of Certbot, one of the most widely used open-source ACME clients. 
We’ll also introduce DigiCert’s automation agent and examine where commercial solutions provide additional value to meet enterprise needs for scalability, governance, and integrations. 

In this session, you’ll learn: 
• How to install and configure Certbot  
• What’s required to execute certificate issuance and renewal with Certbot 
• When open-source ACME clients are a good fit—and when they may introduce risk or operational overhead 
• How DigiCert’s automation client extends control, visibility, and enterprise-grade integration

EMEA Automation Series Season 1 - Part 1: Getting Started with Automation Clients

This is the second session in our four-part series focused on making certificate automation real—with side-by-side walkthroughs of what works, what breaks, and what scales. In this 30-minute session, we explore how to automate the DNS-01 challenge, comparing DIY methods using Certbot and API tokens with a fully integrated solution from DigiCert and UltraDNS. 

As certificate and domain validation lifetimes continue to shrink—dropping to 200 days in 2026 and as low as 10 days for DCV reuse by 2029—manual methods simply can’t keep up. We’ll show you how automation helps you stay ahead of these changes and avoid costly validation errors, failed renewals, and outages.  

You’ll see how teams using open-source tools like Certbot with the UltraDNS DNS plugin can get started quickly—but also where those approaches run into limitations. Then we’ll demonstrate how the DigiCert + UltraDNS integration simplifies and scales certificate automation by handling DNS challenges behind the scenes, with no scripting required.  

In this session, you’ll learn:  
• How DNS-01 domain validation works using Certbot and UltraDNS 
• Where DIY automation falls short as validation cycles accelerate 
• How DigiCert and UltraDNS automate certificate issuance and DNS validation end-to-end 
• Why CAB Forum changes make automation critical for staying compliant 
• How to build scalable DNS validation workflows across business units and environments

EMEA Automation Series Season 1 - Part 2: Automating DNS-01: Certbot DNS Plugin vs. Full DigiCert + UltraDNS Integration

Cloud-native environments spanning containers, VMs, and distributed workloads, require reliable certificate management.  As certificate sprawl accelerates, the risk of outages and vulnerabilities grows. DevOps and security teams need a unified way to automate PKI without slowing development.  

In this session, you’ll see how DigiCert automation integrates with cloud vaults and infrastructure as code tools to issue, renew, and deploy certificates at scale. Learn how to protect dynamic workloads, streamline DevOps pipelines, and build agility for tomorrow’s cryptographic requirements. 

Why Attend: See how to align fast-moving distributed workloads with strong security controls, reduce outage risks from mismanaged certificates, and simplify PKI for cloud-native environments.

EMEA Automation Series Season 1 - Part 3: Beyond ACME: Automating Certificate Management in Complex Environments (EMEA)

Many organisations use public TLS certificates for internal applications and systems where they aren't strictly needed leading to unnecessary costs and certificate lifecycle rules. In this webinar, we’ll explore real-world scenarios where organizations relied on public certificates but achieved greater efficiency, control, and scalability by transitioning to internal PKI. 

We’ll also discuss the trade-offs and considerations of internal PKI like deployment and maintenance costs and demonstrate best practices, including how  DigiCert’s PKI as a Service  can streamline internal certificate management without compromising security or compliance. 

In this session, you’ll learn: 
- Common use cases where public TLS certificates are used unnecessarily 
- Tradeoffs and benefits of using internal PKI 
- Best practices for internal PKI management to mitigate complexity and cost 
- How to implement a scalable and secure internal PKI using  DigiCert’s PKI as a Service 

Who should attend: IT and security leaders responsible for certificate management, especially those managing high volumes of internal certificates or seeking to optimise their PKI strategies in complex environments. 

In this session, you’ll see how automation brings consistency to user and device certificate management. Learn how to strengthen identity assurance, enforce policies, and deliver frictionless access experience while laying the groundwork for zero-trust security and future cryptographic requirements.

EMEA Automation Series Season 1 - Part 4: Optimising Trust Strategies: When to Choose Internal PKI Over Public TLS

The reliance of development teams on open-source components is undeniable. It helps organizations get their software solutions to market sooner and free their engineers to focus on building intellectual property instead of “plumbing”. 

Open-source projects are also an attack vector when bad actors compromise the open-source by injecting malware or developers unknowingly include releases with exploitable vulnerabilities. 

Join Dave Roche, Director of Software Trust at DigiCert, as he shares the 5 best habits for securing your software supply chain from vulnerable or malicious open-source code.

5 Habits to Avoid Security Flaws in Open-Source Software

What makes SBOMs so essential? And how can organizations determine their role in meeting regulatory demands? While regulations may differ in specifics, they all share a common goal: fostering transparency, accountability, and security within your software 

In this webinar, we’ll explore how regulations like DORA, NIS2, and PCI DSS 4.0 are driving the need for software transparency and how SBOMs empower organizations.

Unlocking Compliance: The Role of SBOMs in Modern Software Development

The regulatory landscape is evolving fast, with frameworks like NIS2, eIDAS, the Digital Operational Resilience Act, and the EU Cyber Resilience Act (CRA) setting new expectations for cybersecurity, digital trust, and operational resilience.

For organisations operating across borders, understanding what these changes mean and how to respond is essential. Join experts from DigiCert and Nimbus as they break down key EU regulations and discuss how businesses can build agile, forward-looking compliance strategies.

This session will help you stay ahead of regulatory shifts and ensure your organisation is prepared for what’s coming.

Regulatory Overload? Strategies Navigating NIS2, eIDAS, CRA & More

In this panel discussion, developers and engineering leaders dive into DZone’s June Trend Report to unpack the most pressing challenges in software supply chain security—from zero trust and cloud postures to open-source governance. You’ll hear how teams are navigating risk, privacy, and compliance across the SDLC, and walk away with practical insights you can apply today.

Software Supply Chain Security: Enhancing Trust, Resilience Across Software Development Lifecycle

This is the first session in our four-part series designed to deliver hands-on guidance for certificate automation focused on the tools and workflows IT and security teams use every day.
In this 30-minute session, we’ll lay the foundation for automating certificate management by walking through the installation and configuration of Certbot, one of the most widely used open-source ACME clients. 
We’ll also introduce DigiCert’s automation agent and examine where commercial solutions provide additional value to meet enterprise needs for scalability, governance, and integrations. 

In this session, you’ll learn: 
• How to install and configure Certbot  
• What’s required to execute certificate issuance and renewal with Certbot 
• When open-source ACME clients are a good fit—and when they may introduce risk or operational overhead 
• How DigiCert’s automation client extends control, visibility, and enterprise-grade integration

Part 1 - Getting Started with Automation Clients: Open Source and Commercial Options

This is the second session in our four-part series focused on making certificate automation real—with side-by-side walkthroughs of what works, what breaks, and what scales. In this 30-minute session, we explore how to automate the DNS-01 challenge, comparing DIY methods using Certbot and API tokens with a fully integrated solution from DigiCert and UltraDNS. 
As certificate and domain validation lifetimes continue to shrink—dropping to 200 days in 2026 and as low as 10 days for DCV reuse by 2029—manual methods simply can’t keep up. We’ll show you how automation helps you stay ahead of these changes and avoid costly validation errors, failed renewals, and outages.  
You’ll see how teams using open-source tools like Certbot with the UltraDNS DNS plugin can get started quickly—but also where those approaches run into limitations. Then we’ll demonstrate how the DigiCert + UltraDNS integration simplifies and scales certificate automation by handling DNS challenges behind the scenes, with no scripting required.  
In this session, you’ll learn:  
• How DNS-01 domain validation works using Certbot and UltraDNS 
• Where DIY automation falls short as validation cycles accelerate 
• How DigiCert and UltraDNS automate certificate issuance and DNS validation end-to-end 
• Why CAB Forum changes make automation critical for staying compliant 
• How to build scalable DNS validation workflows across business units and environments

Part 2 – Automating DNS-01: Certbot DNS Plugin vs. Full DigiCert + UltraDNS Integration

Many organizations use public TLS certificates for internal applications and systems where they aren't strictly needed—leading to unnecessary costs and certificate lifecycle rules. In this webinar, we’ll explore real-world scenarios where organizations relied on public certificates but achieved greater efficiency, control, and scalability by transitioning to internal PKI.

We’ll also discuss the trade-offs and considerations of internal PKI—like deployment and maintenance costs—and demonstrate best practices, including how DigiCert’s PKI as a Service can streamline internal certificate management without compromising security or compliance. 

In this session, you’ll learn: 

Common use cases where public TLS certificates are used unnecessarily 
- Tradeoffs and benefits of using internal PKI 
- Best practices for internal PKI management to mitigate complexity and cost 
- How to implement a scalable and secure internal PKI using DigiCert’s PKI as a Service 

Who should attend: IT and security leaders responsible for certificate management, especially those managing high volumes of internal certificates or seeking to optimize their PKI strategies in complex environments. 

In this session, you’ll see how automation brings consistency to user and device certificate management. Learn how to strengthen identity assurance, enforce policies, and deliver frictionless access experience—while laying the groundwork for zero-trust security and future cryptographic requirements.

Part 4 – Optimizing Trust Strategies: When to Choose Internal PKI Over Public TLS

Public key infrastructure (PKI) is essential to enterprise security and operations, but it’s often invisible until something breaks. Outages, audits, and growing machine identity demands have pushed many organisations to rethink legacy certificate management. 

In this webinar, DigiCert and guest speakers from Forrester will unpack the real-world decisions behind modernising PKI. We’ll explore key findings from the Forrester Total Economic Impact™ study commissioned by DigiCert (like a 312% ROI and $10.1M in net present value with DigiCert ONE) and how customers are justifying and realising those gains. 

 Together, the panelists will discuss: 
• How real-world buying decisions are made and the industry trends that are behind them 
• How modernising PKI helped eliminate certificate-related outages and reduce incident costs by $2.8M 
• What CISOs and practitioners need to know about the hidden ROI of certificate lifecycle management and the ripple effects of modernising PKI 
 
Whether you’re facing growing machine identity demands, mounting compliance pressures, or outdated PKI infrastructure, this session offers a practical look at how peers are addressing these challenges and how you can apply learnings in your own organisation.

Stop the Outages: The Economic & Operational Case for Modernising PKI

Compliance is not just a checkbox exercise—it’s a critical pillar of cyber resilience and business trust. Directives and Acts, like NIS2 and DORA, introduce broader scopes and stricter mandates and more changes are coming. Organisations must shift from a reactive security strategy to a proactive one to address the rapid changes in the cyber security landscape.
 
Regulations point to areas and activities that need more security. Your company must define how you will secure them. Learn how a ‘compliance by design’ approach can not only meet regulatory obligations but also strengthen your security posture, streamline risk management, and drive competitive advantage.
 
This webinar will provide senior security leaders with a roadmap for navigating the overlapping requirements landscape including NIS2 and DORA
 
Senior security leaders, join us for a discussion with Carolin Römmer, Principal Consultant on the ISG Cyber Security worldwide solution team, on establishing a security framework for building a resilient and secure future for your organisation.
 
Key takeaways
• Strategies for implementing 'compliance by design' across your security infrastructure
• Leveraging PKI and certificate management for secure digital identities, cyber resilience and agility
• Transforming compliance into a competitive advantage by driving innovation
• Conducting effective risk assessments, implementing security controls to mitigate evolving threats, and addressing events swiftly through preparation

Compliance by Design – A Unified Approach to Cyber Security and Resilience

Managing digital certificates often feels like an uphill battle, with scattered inventories, inconsistent policies, and the constant risk of outages from expiring or mismanaged certificates. Add the complexity of working across multi-vendor environments, and it’s easy for chaos to take over. Without centralized visibility or standardized governance, ensuring compliance and maintaining security becomes a significant challenge. 
Join us as we delve into strategies for taking control of your certificate landscape.  
• How to centralize inventory 
• Enforce consistent policies 
• Stay ahead of expirations and vulnerabilities—all while reducing operational costs and complexity 
If managing certificates feels overwhelming, this session will equip you with practical insights to bring order to the chaos and future-proof your digital trust strategy.

Control the Chaos: Simplify Your Certificate Landscape

Automation Series Season 1

Part 3 – Beyond ACME: Automating Certificate Management in Complex Environments

Automation

Automation Workload

PKI Mondernization

Digital Trust

Cybersecurity

Cyber Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Part 3 – Beyond ACME: Automating Certificate Management in Complex Environments

Presented by

About this talk

DigiCert