We have released "PIV Gateway™ CA," a private certificate authority supporting the issuance of X.509 certificates and platform certificates.

Cyber Defense Institute, Inc. (Representative Director: Kenji Hironaka; Headquarters: 5F Ochanomizu First Building, 2-5-1 Kanda-Surugadai, Chiyoda-ku, Tokyo) has released **"PIV Gateway™ CA," a cloud-based private certificate authority solution that supports the issuance of both X.509 certificates and platform certificates.

What is PIV Gateway™ CA?

PIV Gateway™ CA is a cloud-based private certificate authority solution that supports the issuance of both X.509 certificates and platform certificates.

By utilizing PIV Gateway™ CA, organizations can build an authentication infrastructure equivalent to AAL3 (※1), securing internal networks and systems while reducing operational costs.

PIV Gateway™ CA also supports the issuance of platform certificates (※2). By leveraging platform certificates, organizations can verify device authenticity and traceability, enhancing the trustworthiness of their supply chain.

Note that this is the world's first commercial certificate authority to support platform certificates. (As of February 29, 2024, based on our own research.)

(※1) AAL3 (Authenticator Assurance Level 3): A definition of authentication strength specified in NIST SP800-63. (https://pages.nist.gov/800-63-3-Implementation-Resources/63B/AAL/))*
(※2) A platform certificate is a certificate standardized by the Trusted Computing Group that guarantees the configuration of a computer, and includes information such as the model name, serial number, and hardware bill of materials of the device. By leveraging platform certificates, counterfeit or altered devices or components, as well as unexpected modifications, can be detected.*

PIV Gateway™ CA Details

For more details on PIV Gateway™ CA, please visit the web pages below:

Japanese: https://www.cyberdefense.jp/products/piv_gateway/ca.html
English: https://www.cyberdefense.jp/en/piv_gateway/ca.html

Cyber Defense Institute will continue to work with law enforcement agencies and private sector organizations worldwide to combat increasingly sophisticated, malicious, and globalized cybercrime, contributing to the improvement of security in cyberspace.