Enterprise PKI from One Partner
Certificate Lifecycle Management, private PKI, HSM-based key protection, and public trust need to work together. essendi it brings these elements into a coordinated setup with essendi xc, essendi pki, a European HSM, and a European publicly trusted Certificate Authority. Choose between a fully managed service and an on-premises deployment in your own infrastructure.
Digital certificates secure applications, systems, and connections and need reliable management throughout their lifecycle. The essendi it Enterprise PKI package combines Certificate Lifecycle Management, a private PKI for internal certificates and private trust, HSM-based key protection, and a European publicly trusted CA for certificates that require public trust. You can choose between a fully managed service and an on-premises deployment. Depending on the model, essendi it either operates the environment or supports installation, integration, and initial configuration.
Digital certificates serve different purposes and need to meet different trust requirements depending on the use case. Certificates need to be requested, issued, deployed, monitored, and renewed. Internal use cases may rely on private trust, while publicly accessible services often require public trust. At the same time, the cryptographic keys used by the PKI need to be protected.
A PKI environment therefore brings together several technical building blocks. If certificate management, private PKI, a public CA, and an HSM are planned and operated separately, interfaces, responsibilities, and processes must be coordinated across systems.
The essendi it Enterprise PKI package is designed around this interaction. Technical dependencies can be addressed from the outset, supporting a structured implementation of the PKI.
essendi xc handles Certificate Lifecycle Management and manages certificate processes across different Certificate Authorities.
A European Hardware Security Module (HSM) protects sensitive cryptographic key material used by the PKI. Depending on the deployment model, the HSM is provided as a service or operated in the organization’s own infrastructure.
essendi pki serves as the PKI for internally trusted certificates. It supports dedicated trust structures for applications, systems, devices, and other digital identities.
A European Hardware Security Module (HSM) protects sensitive cryptographic key material used by the PKI. Depending on the deployment model, the HSM is provided as a service or operated in the organization’s own infrastructure.
How a PKI is operated depends on technical, organizational, and regulatory requirements. The package is therefore available either as a fully managed service or as an on-premises deployment.
With the as-a-Service model, essendi it provides the PKI environment and operates it on the customer’s behalf. essendi xc, essendi pki, the European HSM, and the connection to the European CA are brought together in one managed environment.
This removes the need for customers to operate their own HSM and PKI infrastructure.
With the on-premises option, essendi xc, essendi pki, and the HSM run in the customer’s own environment. The European CA is connected for public trust.
essendi it supports installation, system integration, and initial configuration. The customer remains responsible for operating the on-premises systems.
essendi xc forms the management and automation layer for the certificate lifecycle. essendi pki handles private trust, while the European CA covers public trust. The HSM protects the cryptographic key material used by the PKI.
Defined processes and interfaces connect these layers.
essendi xc orchestrates certificate processes throughout the lifecycle and connects to the appropriate Certificate Authority based on the required trust model.
Request → Issue → Deploy → Monitor → Renew → Revoke
Internally trusted certificates can be issued through essendi pki, while publicly trusted certificates are issued through the connected European CA.
Our package combines the core technical systems with support for implementation and initial setup. This establishes the technical foundation for implementing and automating certificate processes.
Certificate management, private PKI, HSM, and public CA are aligned from the outset. This reduces later coordination around interfaces, dependencies, and responsibilities.
essendi it supports implementation and also operates the environment under the as-a-Service model. Customers have one central point of contact across the PKI building blocks.
You choose between As a Service and On-Premises, depending on your technical, organizational, and regulatory requirements.
Whether you choose As a Service or On-Premises, we work with you to determine which model fits your technical and organizational requirements and how essendi xc, essendi pki, the HSM, and the public CA should connect to your existing environment.
