Trustpoint is an open-source PKI platform that helps organizations securely manage digital certificates in industrial environments—especially in mechanical engineering and manufacturing. It supports air-gapped certificate management, open standards and protocols (REST, CMP, EST), workflow automation, Docker-based deployment, and optional HSM integration to simplify secure operation in OT networks. As a funded research project (since September 2023), Trustpoint’s goal is to provide and manage industrial certificates across their full lifecycle and help companies verify trust chains so machines and components can be onboarded and operated more securely and efficiently—without proprietary lock-in.
Keywords:
Open Source PKI, Industrial PKI, OT Security, Industrial Cybersecurity, Digital Identities, Machine Identities, Device Identity, IDevID, LDevID, Zero-Touch Onboarding, AOKI, Secure Device Onboarding, Certificate Lifecycle Management, CLM, Trust Anchor, Trust Chains, Public Key Infrastructure, PKI Management, Air-Gapped Environments, Segmented Networks, Brownfield Integration, Greenfield Integration, Mechanical Engineering, Manufacturing Industry, Industrial Automation, Industry 4.0, Industrial IoT (IIoT), OPC UA, OPC UA GDS, IEC 62443, NIS2, Cyber Resilience Act, REST API, CMP, EST, SCEP, Workflow Automation, Approval Workflows, Certificate Profiles, Code Signing, Hash-Based Signing, Docker, Containerized Deployment, Edge Deployment, HSM Integration, PKCS#11, Vendor-Neutral, Interoperability, Lifecycle Security, X.509, X.509 Certificates, X.509 v3, Certificate Chains, Trust Stores, Root CA, Intermediate CA, Issuing CA, Certificate Validation, TLS Certificates, Mutual TLS (mTLS), Certificate Revocation (CRL), OCSP
