Home / Solutions / Device Trust Solution

Device Trust Solution

A unified PKI management solution for IoT — DigiCert Device Trust Manager can embed trusted identity at any point of the device lifecycle, supports private, cloud and hybrid deployment, and complies with standards such as Matter.

  • Private/cloud/hybrid deployment
  • EST·SCEP·ACME·CMPv2·REST enrollment
  • Lifecycle identity provisioning
  • Unified PKI on DigiCert ONE

Background

  • Multi-scenario: private, cloud (public/private), hybrid and in-country deployment.
  • Broad enrollment: EST, CMPv2, SCEP, ACME, REST API and server-side key generation.
  • Flexible provisioning: embed identity at any point of the device lifecycle — chipsets and parts before assembly, devices at manufacture (birth certificates), and devices operating in the field.
  • Unified PKI: manage TLS, enterprise PKI, code signing, document signing and IoT device trust on DigiCert ONE.

Use cases

IoT device certificates now serve aerospace, healthcare, industrial and more. The solution provides comprehensive IoT trust, helping enterprises build strong security and update capabilities into devices, speed time to market and stay compliant — with CSA Matter compliance and interoperability.

Highlights

Flexibility

Bulk issuance, secure local issuance via gateway, and birth/operational certificates — using REST API, SCEP, EST, ACME and CMPv2 for efficient, secure provisioning and seamless MQTT integration.

Compliance

DigiCert is an approved Matter Product Attestation Authority (PAA) under the CSA Matter standard for smart-home interoperability and a common security framework.

Versatility

Device Trust Manager combines device trust with operational device security across the DigiCert device-trust family, supporting mainstream enrollment methods.

Architecture

Device mgmt /opsEnrollmentIssuanceEmbedded TrustManagerTRUSTEDGEProvision trusted identity todevices via the TrustEdge clientOTA updates for devicesSOFTWARE TRUSTMANAGEREnable and enforcesigning policiesIoT TRUSTMANAGERIoT-specific enrollment workflowsfor trusted identity (EST, CMPv2,SCEP, bulk issuance)CERTCENTRALPublic trustDigiCert ONE CAPrivate trustOther CA

Where it applies

Device identity trust
Chip provisioning
Birth certificate
Field enrollment
Firmware update
Device auth
Matter
Solutions