Needing to take a big leap forward
A large New Zealand bank was relying on an outdated and unstable Public Key Infrastructure (PKI) technology – a legacy system that had been heavily customised over time, which made it impossible to upgrade. Due to its reliance on an obsolete application the bank was vulnerable, with significant risks to its security, operational efficiency, and overall business continuity.
Designing for regulatory and operational success
To overcome these challenges, the bank engaged SSS to design and deploy an enterprise-grade Microsoft PKI. The comprehensive solution involved several critical steps.
SSS developed a robust architecture design and helped secure governance approval from the Bank Architecture Forum, to ensure the new PKI aligned with the bank’s strategic objectives and regulatory requirements. We also developed scripts and procedures for the Root Certificate Authority (CA) ceremony, adhering to ISO standards to establish a secure and trusted PKI foundation.
SSS then assisted the bank with the implementation and deployment of the new Microsoft PKI, ensuring a smooth transition from the outdated system. Finally, we integrated the new PKI with the bank’s certificate lifecycle management solution, enabling centralised and efficient management of all certificates within the bank.
Making a real difference, to security and performance
The implementation of the new Microsoft PKI has delivered significant benefits to the bank.
It has enhanced security and improved operational efficiency. The new PKI provided a more secure and reliable foundation for managing digital certificates, significantly reducing the risk of security breaches, while streamlining PKI operations and resulting in greater efficiency and reduced maintenance costs.
The modern Microsoft PKI infrastructure is also scalable and flexible, allowing the bank to adapt to future security needs and technological advancements. And integration with the certificate lifecycle management solution has enabled centralised management of certificates, improved oversight, and reduced administrative overhead.
Finally, and certainly not least, the bank is benefitting from greater business continuity. The stability and robustness of the new PKI ensure continuous, uninterrupted services, supporting the bank’s critical business functions.
