Multicloud security firm Fortanix Inc. today announced a new partnership with digital certificates and certificate lifecycle management firm Sectigo Ltd. that will allow enterprises to secure their software supply chain by automating the issuance of code-signing certificates.

The partnership is focused on providing enterprises with a fast, scalable solution to automate and control their need to create, track and attest private key security without slowing down developer workflows.

The two companies are seeking to address the issue of securing continuous integration and continuous delivery pipelines with public key infrastructure and certificates, a crucial but time-consuming process known as code signing that ensures software integrity and origin at every development stage. The security step is said by Fortanix to often disrupt developer workflows and stifle innovation.

The partnership between Fortanix and Sectigo offers a solution for automating and scaling the security of digital supply chains by streamlining the process and allowing enterprises to maintain security without slowing down development workflows.

Through the partnership, businesses can automate the issuance and management of code-signing certificates to ensure that private keys are securely generated and stored in hardware security modules while at the same time meeting the latest compliance standards. The integration allows users to verify key security, reduce manual processes, enhance efficiency and ultimately allow developers to focus on innovation without compromising security.

Additionally, Sectigo Certificate Manager now accepts Fortanix key provenance attestations with a certificate signing request, proving that private keys are created and stored in a hardware security module, a requirement from the Certificate Authority/Browser Forum as of 2023.

“Fortanix, like Sectigo, has built its services for automation, which is the only way for enterprises to truly scale and secure their CI/CD pipelines,” said Fortanix co-founder and Chief Executive Anand Kashyap. “Security and speed are two elements that help separate dev teams from the competition and this partnership delivers both.”

Fortanix was previously in news in August when it revealed details on how Xeureka Inc., a subsidiary of Mitsui & Co. Ltd., has leveraged Fortanix’s confidential computing technology to enhance artificial intelligence model accuracy and reduce drug discovery time and costs.

Image: Sectigo