Create Your Own Serverless PKI
summary
Builds a working serverless PKI: generates a root CA locally, uploads the public part to Azure Key Vault, issues device certificates via Azure Functions (using a Key Vault-backed RSA provider by Odin Novotny), stores serials in blob storage, and wires certificates into Device Provisioning Service and IoT Hub. Implementation is .NET Core, handles thousands (and can scale to millions) of IoT devices, shows the Windows key‑store workaround, and demonstrates end‑to‑end issuance and provisioning working in the demo.
AI-written summary · about
chapters (17)
- 0:00Start
- 6:58Securely Communicating with Devices
- 8:32Public Key Infrastructure (PKI)
- 11:48Certificate Authority
- 13:40Certificates 101
- 17:26Azure Key Vault
- 18:41Scenario
- 20:29Generating the Root Certificate on Key Vault
- 24:00Generating the Root Certificate on Our Machine
- 28:15Limiting Root Certificate Access
- 29:47Sign a Request Using the Root Certificate
- 32:30Generate Certificate Signing Request (CSR)
- 33:52Sign Certificate with Root key
- 39:23Getting an Access Token for Azure Functions
- 45:37Sending Data Using the Generated Certificate
- 50:36Takeaways
- 51:26Resources
related talks
01h 01mCreate your own serverless PKI with .NET & Azure Key Vault
14mAutomated (PKI) Infrastructure: The AI You Should Be Thinking About
56mIoT: Taking PKI Where No PKI Has Gone Before
47mSecuring Serverless Applications in Azure
36mYou Like It Or Not; You Need It! - PKI And Certificate Management
15mSecuring your app's communications with Kubernetes, Azure Key Vault, and TLS certificates
28mKeys to the IoT Security Castle
27mAddressing the growing threat of non-human identities with PKI