Back to Projects
SecurityBankingPlatform
Internal PKI Certificate Authority
Systems & DevOps Engineer
Zenith Bank Plc
2018 - 2021
CompletedRemoved recurring public SSL certificate cost across 200+ internal servers by issuing TLS certificates in-house.
The Problem
The internal servers that needed encryption in transit were each being issued a certificate bought from a public certificate authority. The cost recurred every year and grew with the number of servers.
The Approach
Built an internal PKI Certificate Authority to issue and manage TLS certificates for the internal services that required encryption in transit. Public certificates stayed where they belong, on public-facing endpoints. Internal certificates became issue-on-demand rather than a procurement request.
Outcomes & Impact
200+
Servers covered
Internal services requiring encryption in transit
Eliminated
Recurring public cert cost
For internally-encrypted services
On demand
Certificate lead time
Issued internally instead of raising a procurement request
Technologies Used
PKITLSActive DirectoryPowerShellWindows Server
Interested in similar work?
I'd love to discuss how I can help with your project or organization.