Notifications
Clear all
Topic starter
24/06/2026 11:56 pm
TL;DR: Accelerated certificate lifecycles, quantum readiness pressure, and the rise of agentic AI systems that now act as machine identities will force enterprises in 2026 to treat digital trust as a continuously validated control, according to Keyfactor. The governance break point is clear: trust assumptions built for static assets and human-paced review cycles no longer hold when certificates, workloads, and AI agents all move faster than manual oversight.
NHIMG editorial — based on content published by Keyfactor: Keyfactor 2026 Trends and Predictions
By the numbers:
- 1 in 10 organizations experiences a certificate-related outage every week.
- Just 17% have real-time visibility across their certificate landscape.
- Only 42% are actively addressing it today.
Questions worth separating out
Q: How should security teams handle shorter certificate lifecycles without creating outages?
A: Security teams should automate discovery, issuance, renewal, and revocation before shorter lifecycles take effect.
Q: Why do AI agents change identity governance requirements?
A: AI agents change identity governance because they can initiate actions, access data, and interact with systems at runtime.
Q: What breaks when cryptographic inventory is incomplete?
A: When cryptographic inventory is incomplete, organisations cannot reliably see which certificates, algorithms, or dependencies must change first.
Practitioner guidance
- Automate certificate discovery and renewal Map public and private certificate lifecycles end to end, then remove manual renewal from critical paths.
- Assign explicit identity to AI agents Treat AI systems that initiate transactions or access data as machine identities.
- Build a unified cryptographic inventory Track certificates, algorithms, dependencies, and long-lived systems in one place so migration paths are visible before post-quantum change becomes urgent.
What's in the full article
Keyfactor's full blog covers the operational detail this post intentionally leaves for the source:
- The detailed certificate lifecycle guidance behind the 398-day to 47-day transition, including the operational pressure points teams need to model.
- Keyfactor's specific recommendations for quantum readiness, including asset inventory, dependency mapping, and migration sequencing.
- The AI identity section with the vendor's own examples of certificates, mTLS, and governance controls for agentic systems.
- The CRA and compliance section that expands on device trust, firmware signing, and manufacturing controls.
👉 Read Keyfactor's 2026 trends and predictions on digital trust, AI identity, and quantum readiness →
Digital trust in 2026: are your identities and certificates ready?
Explore further
25/06/2026 8:43 am
Digital trust is no longer a one-time assurance problem. The article reinforces a shift NHIMG has tracked for some time: trust now has to be validated continuously across devices, workloads, certificates, and AI systems. That is the right framing because identity control is now temporal as much as it is structural. Practitioners should treat continuous verification as the baseline assumption, not an advanced maturity state.
A few things that frame the scale:
- 91.6% of secrets remain valid five days after the targeted organisation is notified, showing a critical gap in remediation procedures, according to the Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which helps explain why trust gaps persist across machine identity estates.
A question worth separating out:
Q: Who should own digital trust when certificates, workloads, and AI identities overlap?
A: Ownership should sit with a governance function that can coordinate identity, cryptography, and operational recovery across all three. If those responsibilities are split too widely, certificate renewal, workload access, and AI identity oversight will drift apart. A unified owner reduces ambiguity when trust controls need to be changed quickly.
👉 Read our full editorial: Digital trust in 2026 depends on automation and AI identity
