DigiCert, Inc. - Experts & Thought Leaders

DigiCert, a pioneer in intelligent trust, announces accelerating momentum for DigiCert® Trust Lifecycle Manager (TLM), with annual recurring revenue growing 38% year over year as enterprises increasingly automate certificate management and prepare for shorter certificate lifespans and post-quantum cryptography (PQC). TLM's growth reflects a broader shift in enterprise security. Public TLS certificate maximum validity is on a path to just 47 days in 2029, significantly increasing the certificate management workload. That workload is compounded by the growing number of certificates spread across increasingly complex enterprise environments. Post-quantum transition DigiCert's 2026 Global PKI Research underscores the challenge: only 34% of organisations have a complete, up-to-date inventory of their digital certificates, while 73% are very or extremely concerned about outages caused by expired certificates. “Certificate management has become core infrastructure for the enterprise,” said Deepika Chauhan, Chief Product Officer at DigiCert. “A single missed renewal can trigger a costly outage, and shorter lifespans leave less room for error when managing thousands of certificates. The growth we’re seeing in Trust Lifecycle Manager reflects customers’ urgency to automate renewals, keep critical services running, and build the crypto-agility needed for the post-quantum transition.” Manual certificate management Leading brands around the world are turning to DigiCert Trust Lifecycle Manager to modernise how they manage digital trust, including American Red Cross, Agilent Technologies, Circle K, Hitachi, MediData, MGM Resorts International, Nokia, Schweiserische Mobiliar, and W.L. Gore & Associates. “As certificate lifespans continue to shrink, manual certificate management becomes increasingly challenging at enterprise scale,” said Kenneth Nydegger, Product Owner at Schweizerische Mobiliar, one of Switzerland's pioneer insurers. “DigiCert Trust Lifecycle Manager provides the visibility and automation we need to manage certificates more efficiently and reduce operational risk. At the same time, it helps us prepare for future cryptographic requirements and supports a more agile and sustainable security strategy.” Certificate lifecycle operations “Reliability is fundamental to the digital connections that support Switzerland's healthcare system,” said Michael Stocker, Lead ICT-Infrastructure and ICT-Operations at MediData AG, Switzerland's leading provider of secure healthcare data exchange. “With 24,000 participants exchanging more than 120 million documents through our protected digital data space each year, we need certificate management that can scale without interrupting critical workflows. DigiCert Trust Lifecycle Manager helps us automate those operations and maintain trusted connections across this ecosystem.” Organisations across all industries are using DigiCert TLM to discover certificates and cryptographic assets, centralise visibility, and automate certificate lifecycle operations across increasingly complex environments. Large enterprises with certificate environments exceeding 100,000 certificates are using DigiCert Trust Lifecycle Manager to centralise visibility and automate lifecycle operations. TLM helps reduce manual work, lower outage risk, and keep critical services running as certificate lifespans shrink. As certificate lifespans shorten, that automation becomes increasingly important to keeping services running. Risk of unauthorised enrolment DigiCert continues to expand TLM’s capabilities with new innovations that remove manual work and strengthen security across the certificate lifecycle: Continuous Validation, powered by UltraDNS, automates Domain Control Validation, keeping domains continuously validated and ready for certificate issuance and renewal without recurring manual intervention. Apple Device Attestation verifies hardware-backed device identity before certificates are issued. Combined with DigiCert’s existing Jamf integration, it enables automated certificate enrolment for managed Apple devices while reducing the risk of unauthorised enrolment. Enterprise trust store management extends automation to the roots and intermediate certificates that systems rely on to validate trust. Centralised controls and automated distribution help keep trust stores consistent across enterprise environments, reducing the risk of outages and supporting future cryptographic transitions. Private certificate authorities DigiCert is also expanding the TLM integration ecosystem with technology leaders including BeyondTrust, F5, Fortinet, HashiCorp/IBM, HPE, Imperva, and NetScaler, helping organisations extend certificate automation into the applications, infrastructure, and security platforms where certificates are deployed. DigiCert was named a Leader in the IDC MarketScape: Worldwide Certificate Lifecycle Management 2026 Vendor Assessment. The assessment highlighted TLM's centralised discovery, policy-based governance and end-to-end automation across public and private certificate authorities, along with its ability to help smaller teams automate high-volume certificate environments. Real-world applications “Certificate lifecycle management is a strategic requirement for organisations contending with shorter certificate lifespans, rapidly expanding machine identities, and the transition to post-quantum cryptography,” said Jennifer Glenn, Research Director, IDC. "DigiCert offers capabilities required by enterprises navigating this shift. Trust Lifecycle Manager supports CA-agnostic automation, certificate discovery and governance, and operation across large, hybrid environments. These capabilities address both near-term certificate management needs and the longer-term requirement for enterprise crypto-agility." In September, DigiCert Trust Lifecycle Manager was named a recipient of TMCnet's inaugural 2026 Quantum Computing Product of the Year Award, recognising products and solutions advancing the quantum computing ecosystem and its real-world applications.

DigiCert, a pioneer in intelligent trust, today introduced the new DigiCert® Partner Network, a global program that gives partners more ways to sell, deliver, manage, integrate, and transact DigiCert solutions. Built on DigiCert ONE, the network helps partners address immediate certificate lifecycle needs and expand customer engagements into PKI modernisation, cryptographic transformation, post-quantum readiness, and trust for software, devices, content, and AI. The DigiCert Partner Network supports six partner business models: resellers, managed service providers, global systems integrators, Service Delivery Partners, Technology Alliance Partners, and Cloud Marketplace partners. Partners can choose the sales, services, technology, and cloud motions that fit their business, backed by training and certification, go-to-market resources, technical enablement, and DigiCert expertise. Global systems integrators The new MSP Program gives managed service providers a dedicated way to deliver certificate lifecycle management and managed PKI as recurring services. Multi-tenant capabilities in DigiCert ONE support discovery, issuance, renewal, policy enforcement, and monitoring across customer environments, while DigiCert operates the underlying platform and PKI capabilities. This helps MSPs scale recurring services as certificate lifecycles shorten, with opportunities to expand into PKI modernisation and post-quantum readiness. Across the Partner Network, engagements can begin with certificate automation and grow into PKI modernisation, quantum-safe cryptography, and trust for software, devices, and AI, creating deeper customer relationships and services-led revenue. Quantum-safe cryptography “Certificate automation is becoming an urgent priority, but it is only the beginning of the opportunity for our partners,” said Jeff Manning, Global VP of Channels and Alliances, at DigiCert. “With DigiCert, partners can address the trust challenges customers face today and expand into new areas spanning PKI, software, devices, content, AI and post-quantum readiness. The DigiCert Partner Network gives them the technology, expertise and routes to market to turn those challenges into broader, long-term customer relationships and recurring revenue.” Initial readiness assessments Start with certificate lifecycle automation and managed services. As maximum public TLS certificate validity moves toward 47 days, organisations will need automation. Within the broader Partner Network, the new MSP Program gives providers a dedicated way to deliver certificate lifecycle management and managed PKI as recurring services. Multi-tenant capabilities in DigiCert ONE support discovery, issuance, renewal, policy enforcement and monitoring across customer environments, while DigiCert operates the underlying platform and PKI capabilities. MSPs can reduce manual work and extend these engagements into PKI modernisation, crypto-agility, secure DNS operations and post-quantum readiness. Build trust into software, devices, content, and AI. Partners can help customers protect software supply chains, manage device identities, establish digital content provenance, verify model integrity and govern autonomous agents. For AI, they can build services that verify content and models and establish the identity, ownership and authority of AI agents. Lead customers from cryptographic discovery to post-quantum readiness. Partners can help organisations identify cryptographic assets and risk, prioritise remediation, modernise legacy PKI and manage the transition to quantum-safe cryptography. DigiCert Quantum Central provides a foundation for cryptographic discovery, risk prioritisation, remediation planning and progress tracking, enabling partners to turn initial readiness assessments into longer-term transformation programs. Post-quantum transition “Customers increasingly need to manage trust across their entire digital environment, from certificates and PKI to software, devices and AI,” said Michael Duffy, CEO/CISO, Excedo Networks AB. “What stands out about working with DigiCert is the breadth of the platform and the expertise behind it. We can begin by solving an immediate need, such as automating certificate lifecycles, and then help customers modernise their cryptographic infrastructure, prepare for the post-quantum transition and address emerging AI trust requirements. That creates a more strategic relationship with our customers while giving us new opportunities to expand the services and long-term value we provide.” Powered by DigiCert ONE, the Partner Network spans PKI, certificate lifecycle management, DNS, software trust, device identity, content provenance, AI trust and post-quantum readiness, giving partners a common foundation for broader digital trust services.

DigiCert, a pioneer in intelligent trust, announces support for the NVIDIA Open Agent Safety Platform to help enterprises establish verifiable identity and authority for autonomous AI agents. At the centre of the NVIDIA Open Agent Safety Platform is NVIDIA OpenShell, an open, secure runtime that places infrastructure-level controls around autonomous agents. OpenShell permits nothing by default, enforces policy outside the agent’s process, and records every decision to allow or deny an action. Infrastructure-level controls DigiCert complements those controls with DigiCert AI Trust Manager, which helps organisations discover and manage the AI agents they own or operate, establish each agent’s verifiable identity and ownership, define what it is authorised to do, and revoke that authority with a kill switch when trust changes. Together, the technologies address two critical requirements for autonomous AI: identifying which agent is acting and controlling what an agent can do. “AI agents are starting to do real work across business systems, and that means companies need to know exactly which agent is acting, what it’s allowed to do, and when to stop it,” said Amit Sinha, CEO of DigiCert. “NVIDIA helps create the boundary around the agent. DigiCert helps establish who that agent is and what authority it has. Together, that gives enterprises a much clearer way to put autonomous AI to work with control and accountability.” Security-policy enforcement NVIDIA OpenShell lets an agent retain its reasoning and skills while every file, network, process, credential, and inference call crosses a boundary controlled by the platform. Because enforcement occurs outside the agent’s process, even a compromised agent cannot override the restrictions. NVIDIA Sentry on BlueField-4, powered by NVIDIA DOCA, adds hardware-isolated, out-of-band monitoring of agent activity and security-policy enforcement that does not depend on the host. NVIDIA Vera supplies the compute for agents’ CPU-intensive workloads. DigiCert AI Trust Manager extends the OpenShell environment with enterprise-class agent management built around identity, authority, policy, and lifecycle control. DigiCert AI Trust Manager gives each agent a DigiCert AI Passport, a portable, cryptographically signed credential that verifies an agent’s identity and connects it to an accountable owner. Policy-based “visas” define which systems, data, and actions the agent may access, as well as how long that authority lasts. Same identity provider Because the DigiCert AI Passport and its permissions travel with the agent, other systems and organisations can independently verify them without relying on the same identity provider. If an agent attempts a prohibited action, DigiCert’s automated kill switch can block it and, under policies set by the agent’s owner or passport issuer, revoke its authority at the source and quarantine it. DigiCert’s support for NVIDIA Open Agent Safety Platform is designed around four areas: Identity that policy can act on. Agents running within an OpenShell environment can be associated with an AI Passport so policies can rely on verified identity. Verification before execution. Agents, models, and MCP servers can be signed and associated with an AI Bill of Materials to help establish what is being deployed before execution. Auditable evidence. OpenShell records policy allow-and-deny decisions. DigiCert’s approach is designed to bind trusted identity and cryptographic evidence to those interactions, creating a stronger record for governance and audit. Trust across company boundaries. PKI already enables independent verification of identity across the internet. DigiCert is extending that same trust model to agents so organisations can verify AI identities even when agents interact across companies, clouds and technology environments. Providing verifiable identity The approach is designed to complement, not replace, the security controls provided by NVIDIA Open Agent Safety Platform. NVIDIA establishes and enforces the agent’s operating boundary. DigiCert provides verifiable identity and authority that can persist as the agent interacts beyond that boundary. “As agents begin interacting with other agents beyond company lines, identity cannot depend on every participant belonging to the same identity system,” Sinha said. “We need a trust model that can cross those boundaries. PKI solved that problem for the internet at scale, and we believe the same foundation has an important role to play in establishing trust for autonomous agents.” DigiCert AI Trust Manager support for NVIDIA Open Agent Safety Platform begins with NVIDIA OpenShell, with additional capabilities planned as DigiCert and NVIDIA continue to advance enterprise AI trust and agent security.