Certificate lifecycle
Manage enrollment, renewal, deployment and revocation across the lifecycle of industrial devices and applications.
CERTIFICATE MANAGEMENT · INDUSTRIAL OT · MACHINE IDENTITIES
Certificate management for industrial OT.
Powered by Trustpoint.
Manage certificates across industrial devices, machines and applications. Trustpoint simplifies enrollment, deployment, renewal and revocation through locally operated lifecycle workflows and industrial device integrations.
Open-source certificate management · Local OT deployment · Existing PKI integration
WHAT IS TRUSTPOINT?
Industrial certificate management, built for operational realities.
Managing certificates in industrial environments is more than issuing them once. Long-lived devices and machines need repeated enrollment, deployment, renewal and revocation across heterogeneous networks and application lifecycles.
Trustpoint is an open-source certificate management platform for industrial environments. It helps organizations manage certificate lifecycles locally, integrate industrial devices and connect to existing enterprise PKI through suitable enrollment and trust workflows.
↔︎
Industrial device integration
Connect Trustpoint to machines, controllers, gateways and applications operating in segmented OT environments.
Local CA and RA
Operate a local certificate authority when required, or manage enrollment workflows through a reachable upstream CA.
Existing PKI compatibility
Complement enterprise PKI rather than replacing it by default, using integration patterns suited to the operating environment.
OUR SERVICES
Professional services built around Trustpoint.
Deploy industrial PKI in OT with Trustpoint. We help you plan the architecture, connect devices and existing CAs, automate certificate lifecycles, build tailored integrations and support eligible Trustpoint releases.
Engineering & Integration
Deploy and integrate Trustpoint in your industrial environment, from architecture and device onboarding to customer-specific engineering.
- Trustpoint architecture & deployment
- Enterprise PKI and CA/RA integration
- Device onboarding and certificate automation
- OPC UA / GDS, CMP and EST workflows
- Custom connectors, APIs and extensions
Support & Maintenance
Get contract-based break/fix support for eligible official Trustpoint releases, with a clearly defined scope and severity-based initial response targets.
- Trustpoint troubleshooting and defect analysis
- Certificate workflow and API diagnostics
- Installation and configuration troubleshooting
- Upgrade-related troubleshooting
- Separately agreed maintenance when needed
OEM & White Label
Build on Trustpoint as a foundation for customer-specific products and industrial solutions, with engineering arrangements tailored to the project.
- Trustpoint-based OEM integration
- White-label development
- Embedded or containerized deployments
- Product-specific features and workflows
- Individually agreed engineering and support
WHY TRUSTPOINT
Built for industrial certificate management.
Trustpoint brings certificate lifecycle management into OT environments. As a locally deployable open-source platform, it supports machine identities, certificate enrollment and renewal without depending on permanent cloud connectivity.
Certificate management
Manage enrollment, deployment, renewal and revocation for industrial devices and applications.
Local & offline-capable
Operate where a plant or machine domain requires local control; certificate issuance still depends on a reachable issuing CA in the relevant environment.
Brownfield workflows
Combine manual device onboarding with automation where devices and interfaces permit.
Enrollment & OPC UA
Support CMP, EST and OPC UA/GDS certificate workflows where the release and device capabilities allow it.
Open source
Source code is publicly available for inspection, adoption and contribution under the project license.
Existing PKI integration
Use Trustpoint alongside enterprise PKI infrastructure rather than replacing it by default.
HOW WE WORK
Assess. Integrate. Hand over.
Assess & design
Review your Trustpoint use case, device landscape, existing PKI, network boundaries and project requirements.
Implement & validate
Configure and integrate Trustpoint, develop agreed extensions and validate workflows against project-specific acceptance criteria.
Hand over & support
Deliver documentation and operational guidance. Commercial break/fix support and further engineering are available through separate agreements; customers retain operational responsibility.
TRUSTPOINT DEPLOYMENT SCENARIOS
Deploy certificate management where it is needed.
Local OT Edge
Operate Trustpoint close to machines and devices inside industrial networks.
Registration Authority
Manage enrollment workflows while certificates are issued by a reachable upstream CA.
Local CA
Issue certificates locally for suitable segmented or isolated environments.
OEM Integration
Integrate Trustpoint into a customer-specific industrial product or software solution.
OPEN SOURCE & PROFESSIONAL SERVICES
Open-source certificate management. Professional support around it.
Trustpoint is an open-source certificate management platform for industrial environments. You can explore, use and contribute to the project without purchasing commercial services from Trustpoint Labs GmbH.
Trustpoint Labs GmbH provides engineering, integration, custom development and commercial support for organizations deploying Trustpoint in industrial and OT environments. The open-source project remains distinct from the commercial services that complement it.
GET IN TOUCH
Let's make Trustpoint work in your environment.
Tell us about your Trustpoint deployment, integration, custom engineering or support requirements.
Start with the right scope.
We can start with a Trustpoint-focused technical workshop, integration sprint or pilot deployment. Early-stage requirements are welcome.
Prefer email?contact@trustpoint-labs.com ↗︎
Discuss your Trustpoint project
Fields marked * are required.
A FEW PRACTICAL DETAILS
Good to know.
What does Trustpoint Labs offer?
Trustpoint Labs provides engineering and integration, custom development, contract-based technical support and OEM/white-label services around the Trustpoint open-source platform.
Is Trustpoint Labs the same as the Trustpoint project?
No. Trustpoint is an open-source software project. Trustpoint Labs is a commercial services partner offering professional assistance with adoption, deployment and integration.
Do I need to replace my existing PKI to use Trustpoint?
Not necessarily. Trustpoint can be integrated with existing issuing PKI infrastructure through supported interfaces and appropriate deployment modes. The architecture depends on your PKI, devices and network requirements.
Do you offer general PKI consulting without Trustpoint?
Our consulting and engineering offering focuses on deploying Trustpoint in industrial PKI and OT environments. We assess connected PKI systems and devices as part of those projects.
Which protocols and interfaces are supported?
Trustpoint includes certificate management and enrollment interfaces such as CMP, EST, REST APIs and OPC UA GDS functionality. The exact capabilities depend on the Trustpoint release and connected devices.
Can Trustpoint operate in isolated networks?
Trustpoint supports local deployments without permanent cloud access. For certificate issuance and renewal, a suitable CA must be reachable within the deployment's network constraints.
What is included in commercial support?
Standard support is a contract-based break/fix service for eligible official Trustpoint releases. It covers defined Trustpoint troubleshooting and defect analysis, not new deployment projects, custom development or third-party system support. See the Support page for details.