DXC Key & Certificate Services

DXC provides a set of sensors and agents to scan for your public and private TLS/SSL certificates across your enterprise network and public Internet host, both on-premises and in the cloud, to find your digital certificates.   

Enterprises need to track their inventory of issued certificates to know where they are used, who issued them, how they are being used and when they will expire. DXC manages the complete lifecycle of certificates from issuance by certificate authorities (CAs), through provisioning, revocation, renewal and reissue. This includes validating, installing the certificate on the target (such as a server), and taking the appropriate steps to ensure that the certificate will not expire to avoid operational impact on services or business revenues.

DXC uses PKI to secure communication between IoT devices and their managing platforms, delivering data confidentiality, integrity, authentication and authorization.

DXC manages the lifecycle of cryptographic keys: generation, exchange, storage, use, crypto-shredding and renewals. This includes designing and documenting relevant cryptographic protocols, key servers and processes. 

DXC makes it possible for your employees to use your private cryptographic keys via an HSM — computer hardware that securely stores them, ensuring they are accessible only to authorized users; there’s no need for your workers to have direct access to those keys. Keeping your private keys out of the hands of end users or application software reduces the attack surface. Our HSM module prevents key leakage, performs key generation, and creates encryption and decryption algorithms fast and efficiently.

DXC encodes data so it can be read only by those with the correct digital key that can decrypt the data, whether that data is stored in a physical data center, in a third-party storage application, or in a private or public cloud. Our key and certificate services helped a global manufacturing company transition to a multi-cloud environment, increasing scalability and reducing costs while maintaining stringent security measures.