What is Triple PKI?
Triple PKI is TripleCyber's certificate management and cryptographic identity layer. It handles the full certificate lifecycle (issuance, renewal, revocation) with zero-trust context baked in. Every certificate carries trust zone metadata, so any system in the TripleSOC ecosystem can verify not just the identity of a peer, but its current trust classification.
How It Fits into TripleSOC
Triple PKI provides the cryptographic foundation that other TripleSOC components rely on:
- Agents authenticate to the TripleSOC server using PKI certificates
- Certificate events (issuance, expiry, revocation) are logged in the TripleSOC indexer
- Trust zone transitions trigger certificate re-evaluation automatically
When a certificate is revoked or expires, TripleSOC generates an alert and correlates it with other activity from that endpoint, giving your SOC team immediate context.
Key Capabilities
- Trust-aware certificates — every certificate embeds the entity's trust zone classification
- Automated lifecycle management — issuance, renewal, and revocation without manual intervention
- ABAC-governed issuance — Triple ABAC policies determine whether a certificate request is approved based on device posture and risk score
- Revocation intelligence — when a certificate is revoked, downstream systems (DNS, OAuth) are notified immediately
- Hardware-backed keys — support for TPM and HSM integration for high-assurance environments
How It Works with Other Components
Triple PKI certificates are consumed by Triple DNS (to validate DNS infrastructure), Triple OAuth (to establish client identity in OAuth flows), and Triple ABAC (as an attribute in policy decisions). ZTRS risk scores can trigger automatic certificate revocation when a device's trust posture degrades.
