Situation

Device Authority and Entrust partnered to provide solutions to a global manufacturer of automotive components that has multiple secure manufacturing lines that require a Key Distribution and Management System and PKI service to provision digital certificates to each OEM.
This manufacturer needed to be able to securely transport keys from the OEM delivery service to the remote factories. These keys are injected directly into the OEM’s vehicle electronic components, which are then distributed to end customers for inclusion in their finished automotive products. Those finished products needed to be able to close the loop with the initial key provider for auditing purposes.

Solution

Device Authority’s KeyScaler and Entrust PKI were implemented to provide:

• A hybrid and high scale PKI service to provision digital certificates as a trusted identity, unique to each OEM
• Certificate Lifecycle Management capabilities to reduce management overheads and risk
• Device Identity management via the use of Device Authority’s Dynamic Device Key Generation (DDKG) technology
• KeyScaler, a key distribution and management solution backed by the PKI, to securely transport keys from the OEMs of production equipment to remote factories worldwide
• Policy-driven Encryption with granular read/write access permissions HSM Access Control for integration with third-party
• HSM for secure and automated key generation and storage using HSM
• Key generation and usage reporting for auditing

Situation

A multi-utility company based in Italy, specializing in waste management, recycling logistics, and environmental services, sought a robust PKI-based security framework for its growing fleet of connected waste disposal trucks. These vehicles rely on telematics systems for routing, diagnostics, emissions monitoring, and driver safety — all of which require secure, authenticated communication with cloud-based platforms.

Given the critical nature of the services provided, the customer needed a way to manage vehicle identity, ensure secure ownership transfers (in cases of resale or leasing), and automate certificate provisioning and renewal throughout the vehicle’s lifecycle. Manual processes were inefficient and risk-prone, especially at scale, and a future-proof solution was required to integrate with their existing Azure-based infrastructure.

Solution

Device Authority KeyScaler was used to provide:

• PKI Services for IoT with full Automated Identity Lifecycle Management, including certificate issuance, renewal, and revocation.
• Trust anchor technology embedded in each vehicle’s Telematics Control Unit (TCU) to establish secure identity at the hardware level.
• Seamless integration with Microsoft Azure IoT and the customer’s Connected Vehicle Platform, enabling zero-touch device provisioning via Microsoft DPS (Device Provisioning Service).

Situation

An Indian commercial vehicle OEM (focused on trucks) operates a secure manufacturing environment that requires a robust Key Distribution and Management System (KMS). This system must securely transfer cryptographic keys from a protected repository to the assembly lines, where the keys are injected directly into vehicle’s ECUs. These ECU’s are later integrated into finished vehicles delivered to end customers.

Additionally, the process must ensure a closed-loop mechanism with the original key provider to enable complete auditing and compliance.

Solution

Device Authority KeyScaler is used to provide the following:

• Automated Key Generation and Rotation: Cryptographic keys are generated using strong algorithms and rotated periodically to maintain security integrity​
• Secure Storage and Distribution: Keys are stored in a hardened repository and distributed via encrypted channels to assembly lines, ensuring zero exposure during transit.​
• Policy-Based Access Control: Role-based policies govern who can access keys and when, reducing insider threats.
• Closed-Loop Auditing and Compliance: Every key injection event is logged, enabling full traceability and compliance with industry standards such as ISO 21434 and UNECE WP.29.