IBM Vault Expands PKI Capabilities with Public CA Integration

IBM Vault has expanded its PKI capabilities by integrating public certificate authorities, enabling automated management of X.509 certificates within a single workflow. This integration resolves the challenges of fragmented certificate management by allowing organizations to manage both private and public certificates through Vault's existing APIs.

The integration utilizes the ACME protocol, initially supporting the HTTP-01 challenge for domain verification with plans to add DNS-01 support. Key functionalities include secure CA connection setup, manual renewal options, and full automation through the Terraform Vault provider. This development aims to minimize outages and enhance compliance with standards such as NIST and PCI DSS.