Certificate Management
What is Certificate Management?
The processes for managing the lifecycle of digital certificates including issuance, renewal, revocation, and key storage.
Terms that appear alongside certificate management
Each of these is named in at least one of the same controls as certificate management. The number is how many controls name both.
- tls 5 shared controls
- cybersecurity 2 shared controls
- nist 2 shared controls
- encryption 2 shared controls
- key management 2 shared controls
- ipsec 2 shared controls
- authentication 2 shared controls
- integrity 2 shared controls
Frameworks that govern certificate management
What the standards actually require on certificate management
Requirements naming certificate management across 6 standards, quoted from the control text.
Document and implement an enterprise certificate management standard covering the certificate lifecycle and certificate policies, so certificates used by critical services are tracked and renewed.
ASBv3-DP-7 · Use a secure certificate management process →Use AWS Certificate Manager and Private CA to issue, deploy and rotate TLS certificates, avoiding manual installation and unmanaged certificate stores.
SEC09-BP01 · Implement secure key and certificate management →Certificates are managed through a defined process: initial certificate creation (often a manufacturer certificate), onboarding of an entity into the operator's domain, enrolment through certificate signing requests processed by the CA using standard enrolment...
iec-62351-power-systems-communication-security::9:5.8 · Part 9, 5.8: certificate management (process, initial creation, onboarding, enrolment, CSR processing, enrolment protocols, trust anchor management) →The applicant identifies the security assets and protection mechanisms that depend on in-service action and develops the instructions for continued airworthiness that keep them effective after entry into service: physical and operational security procedures, m...
do-326a-ed-202a::4.3.1 · Security instructions for continued airworthiness →Govern the use of cryptography and cryptographic protocols, key and certificate management included, through policies and procedures so that systems and information are protected as fully as possible.
awwa-cybersecurity-guidance-for-the-water-sector-american-water-works-association::SC-1 · SC-1 Cryptography and key management policy →HKMA TM-G-1 Information Security Programme. Comprehensive technical + administrative + physical security controls. (1) INFORMATION SECURITY PROGRAMME (TM-G-1.6.1) - documented + Board-approved information security programme + governance + roles + ISMS-style al...
HKMA-TMG1-InfoSec-Access-PAM-Network-Crypto-DLP-Endpoint · TM-G-1 Information Security Programme + Access + PAM + Network + Crypto + DLP + Vulnerability + Endpoint →Questions people ask about certificate management
What is Certificate Management?
Why is Certificate Management important for compliance?
Which compliance frameworks address Certificate Management?
Where can I learn more about Certificate Management?
See how Certificate Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.