DigiCert for Government (FR2635050845) Trust Center

DigiCert for U.S. Government (FR2635050845) helps federal agencies reduce certificate-related outages gain control over the digital identities, certificates, cryptographic keys, and software their systems depend on. The unified SaaS platform gives teams a consistent way to manage these risks across their users, devices, workloads, and applications. Through DigiCert® ONE on AWS GovCloud (US), the platform helps agencies discover and automate certificate lifecycles, operate private certificate authorities, protect software-signing processes and supply chains, and enforce consistent administrative access controls. These integrated capabilities help agencies reduce certificate-related outages, strengthen cyber resilience, improve auditability, and manage digital trust across cloud, hybrid, and on-premises environments. DigiCert for U.S. Government includes three integrated solutions: • DigiCert® Trust Lifecycle Manager: CA-agnostic certificate lifecycle management (CLM) solution providing centralized discovery, inventory, enrollment, and automated renewal of public and private certificates across users, devices, servers, and infrastructure, eliminating manual tracking and reducing certificate-related outages. It supports standard enrollment protocols (ACME, EST, SCEP, and CMP) and integrates natively with AWS services alongside CMDB platforms, endpoint management tools, identity providers, and third-party scanners. • DigiCert® Private CA: Private certificate authority solution enabling organizations to create, manage, and operate privately trusted root and intermediate CAs for issuing certificates to internal users, devices, servers, and workloads. • DigiCert® Software Trust Manager: A code signing and secure releases solution that provides centralized, policy-driven management of code signing keys and certificates, HSM-backed private key protection, CI/CD pipeline integrations, approval workflows, and comprehensive audit logging. DigiCert ONE environments supporting Software Trust Manager are covered by applicable independent security and compliance attestations, including SOC 2 Type II and WebTrust, depending on the deployment and region. DigiCert uses FIPS 140-2 and/or FIPS 140-3 compliant Hardware Security Modules (HSMs), as applicable, to protect cryptographic keys. Software Trust Manager helps organizations secure software signing and release processes, enforce signing policies, protect signing keys, and strengthen software release security.