Ascertia PKI
Trusted, scalable & quantum-ready PKI
A Future-Ready PKI for the Next Era of Digital Security
Digital trust has become the backbone of modern business and government services. From secure authentication and encrypted communications to national identity schemes and IoT ecosystems, organisations need a Public Key Infrastructure (PKI) they can rely on – one that is not only compliant today, but also ready for tomorrow’s challenges.
Ascertia PKI provides a complete, standards-compliant, and future-proof PKI solution designed to issue, manage, and validate digital certificates at scale. Built on more than 20 years of expertise, Ascertia PKI combines security, scalability, and flexibility with support for quantum-resistant algorithms, ensuring your trust infrastructure remains resilient for decades to come.
Flexible deployment for any environment
Every organisation’s trust requirements are different. That’s why AscertiaPKI is built to deploy where you need it most:
- On-premise for maximum control and compliance with strict security policies
- Private cloud or hybrid models to balance scalability with sovereignty
- Enterprise PKI to secure authentication, VPN access, and encrypted email
- National-level deployments for eGovernment, ePassport, and citizen ID services
- Qualified Trust Service Provider (QTSP) models aligned with eIDAS requirements
- Cross-industry adaptability, from banking and healthcare to telecoms and manufacturing
This flexibility ensures that your PKI aligns seamlessly with both IT strategy and regulatory needs.
Compliance, certifications & global standards
In security, trust comes from transparency and certification. Ascertia PKI is independently certified and built to meet international standards, so customers can deploy with confidence:
- Common Criteria EAL4+ certified
- WebTrust for CAs compliance
- ETSI EN 319 411 / 421 for TSPs
- eIDAS Qualified Trust Services support
- CA/B Forum Baseline Requirements for commercial CAs
Compliance with these standards provide assurance that Ascertia PKI meets the highest levels of security, interoperability, and compliance, whether deployed by a regulated enterprise, a national government, or a commercial CA.
Ready for the post-quantum era
Cryptography is evolving, and so is PKI. While RSA and ECDSA remain trusted today, quantum computing poses new challenges for tomorrow. Ascertia PKI addresses this with built-in support for Post-Quantum Cryptography (PQC):
- RSA & ECDSA for classical deployments
- CRYSTALS-Dilithium (FIPS 204)
- Kyber (FIPS 203)
- SPHINCS+ (FIPS 205)
- Classic McEliece
For organisations that want to begin their journey now, Ascertia offers a PQC Starter Kit and Proof of Concept (POC), enabling teams to explore, test, and prepare for the post-quantum transition. This dual support ensures a smooth migration path and long-term protection of your trust ecosystem.
Comprehensive technical capabilities
Ascertia PKI isn’t just future-ready; it’s also feature-rich today. It supports the full lifecycle of certificate issuance, validation, and revocation, with advanced protocol support for modern IT environments.
Key capabilities include:
- Protocols: SCEP, EST, CMP, ACME, XKMS, and SCVP
- Certificate issuance and management: EV, OV, DV, device certificates, and IoT enrolment
- Validation and revocation: OCSP and CRLs
- Timestamping: RFC 3161-compliant TSA for proof of time and integrity
- High availability: Active-active clustering for fault tolerance and performance
- HSM integration: Full support for FIPS and Common Criteria-certified HSMs
This comprehensive feature set ensures PKI can integrate seamlessly into enterprise IT, government infrastructures, and regulated trust service environments.
Scalable, resilient, and performance-driven
When PKI underpins national ID schemes or secures millions of devices, scalability and resilience aren’t optional. They are essential.
Ascertia PKI is engineered for performance at scale, with the ability to:
- Issue thousands to hundreds of thousands of certificates per hour
- Operate in active-active high availability mode for uninterrupted service
- Leverage HSM-backed cryptographic acceleration for intensive workloads
- Scale horizontally to meet growing demand without performance degradation
Whether your deployment is enterprise-grade or national-scale, the Ascertia PKI ensures security without compromise on speed or reliability.
Real world use cases
Ascertia PKI is deployed worldwide in critical environments where trust is paramount:
- Enterprise security: workforce authentication, email encryption, VPN access
- National ID and eGovernment: citizen identity, ePassports, eFiling
- Financial services: PSD2 compliance, secure transactions, eIDAS qualified certificates
- Telecoms and IoT: secure device enrolment, communications at scale
- Qualified Trust Service Providers (QTSPs): delivering regulated trust services under eIDAS
Our customers include enterprises, banks, governments, and TSPs who rely on PKI to deliver secure digital services every day.
We are always searching for ways to enhance how we support our extensive network of manufacturers. Through Ascertia’s bulk signing capabilities, we have accelerated projects and raised our high levels of customer care even higher.
Ray Wagner
Senior Software Product Manager
Shared Software
Get started
Discover how Ascertia PKI can strengthen your digital trust infrastructure today and protect it against tomorrow’s threats.