loader image

HomeEvents

Webinar: Digital Certifi­cates and Keys — Cyber­se­cu­rity in IoT and OT

Digital certifi­cates and cryp­to­graphic keys are essen­tial for securing machine iden­ti­ties in IoT and OT envi­ron­ments. With new EU regu­la­tions like NIS‑2 and the Cyber Resilience Act, compa­nies must rethink how they manage device authen­ti­ca­tion, secure commu­ni­ca­tion, and life­cycle compli­ance.

CONTENT
RECAP

  • The webinar addressed why machine iden­ti­ties are becoming a central concern in indus­trial cyber­se­cu­rity. As devices move beyond protected envi­ron­ments and operate across complex networks, each connec­tion must be authen­ti­cated and encrypted. Digital certifi­cates ensure that data and soft­ware updates remain untam­pered and veri­fi­able, even when trans­mitted across multiple systems or networks.

  • The session explained how certifi­cates are created, stored, distrib­uted, and used throughout a device’s life­cycle. Partic­i­pants learned about chal­lenges such as the initial iden­tity assign­ment in manu­fac­turing, secure soft­ware updates, and the manage­ment of owner­ship changes. Exam­ples included the use of secure elements like TPMs and stan­dard enroll­ment proto­cols such as SCEP, EST, or OPC UA-based solu­tions.

  • The concept of Zero Trust was also covered. In a modern OT or IoT setup, phys­ical bound­aries offer no real protec­tion. Instead, every commu­ni­ca­tion must be authen­ti­cated, and trust is no longer assumed. The presen­ta­tion empha­sized the impor­tance of cryp­toagility, life­cycle certifi­cate manage­ment, and inte­gra­tion into existing indus­trial infra­struc­tures.

  • Overall, the session made clear that digital certifi­cates and cryp­to­graphic keys are not optional add-ons but a neces­sary foun­da­tion for meeting legal require­ments and protecting connected indus­trial systems.

You want to have the presen­ta­tion slides or more insights?